Branch: refs/heads/master
Home: https://github.com/jenkinsci/script-security-plugin
Commit: d738f61ef817b909669280304dec2c534559f0a1
https://github.com/jenkinsci/script-security-plugin/commit/d738f61ef817b909669280304dec2c534559f0a1
Author: Wadeck Follonier <wadeck.follon...@gmail.com>
Date: 2018-01-09 (Tue, 09 Jan 2018)
Changed paths:
M
src/main/resources/org/jenkinsci/plugins/scriptsecurity/sandbox/whitelists/blacklist
Log Message:
-----------
[SECURITY-683] Prevent Spectre/Meltdown
- preventively blacklist System.nanoTime()
- currently the accuracy / precision of the system calls inside a sandbox is
very bad and so prevent naturally the attack.
Commit: cb1873a272002734b508a790ff23e5df04ce90af
https://github.com/jenkinsci/script-security-plugin/commit/cb1873a272002734b508a790ff23e5df04ce90af
Author: Wadeck Follonier <wadeck.follon...@gmail.com>
Date: 2018-01-09 (Tue, 09 Jan 2018)
Changed paths:
M
src/main/resources/org/jenkinsci/plugins/scriptsecurity/sandbox/whitelists/blacklist
Log Message:
-----------
- update order of blacklist
Commit: 06fa0ea22dddfe1778061ce89e0b7355931ac9d5
https://github.com/jenkinsci/script-security-plugin/commit/06fa0ea22dddfe1778061ce89e0b7355931ac9d5
Author: Andrew Bayer <andrew.ba...@gmail.com>
Date: 2018-01-10 (Wed, 10 Jan 2018)
Changed paths:
M
src/main/resources/org/jenkinsci/plugins/scriptsecurity/sandbox/whitelists/blacklist
Log Message:
-----------
Merge pull request #175 from Wadeck/SECURITY-683_SPECTRE_MELTDOWN
[SECURITY-683] Preventively reduce Spectre/Meltdown risk
Compare:
https://github.com/jenkinsci/script-security-plugin/compare/28dee779379e...06fa0ea22ddd
--
You received this message because you are subscribed to the Google Groups
"Jenkins Commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to jenkinsci-commits+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
