Branch: refs/heads/stable-1.642
Home: https://github.com/jenkinsci/jenkins
Commit: f5c51fbad2b62b81dc1e0402aeee058a4a478046
https://github.com/jenkinsci/jenkins/commit/f5c51fbad2b62b81dc1e0402aeee058a4a478046
Author: Daniel Beck <[email protected]>
Date: 2016-01-26 (Tue, 26 Jan 2016)
Changed paths:
M core/src/main/java/hudson/cli/CLIAction.java
Log Message:
-----------
[FIX SECURITY-238] Don't echo command name
Commit: 79e0b64322a6b15e0b80ac6511c9aa74383642be
https://github.com/jenkinsci/jenkins/commit/79e0b64322a6b15e0b80ac6511c9aa74383642be
Author: Daniel Beck <[email protected]>
Date: 2016-01-26 (Tue, 26 Jan 2016)
Changed paths:
M core/src/main/java/jenkins/security/ApiTokenProperty.java
Log Message:
-----------
[FIX SECURITY-241] Compare API tokens in constant time
Commit: 559566b1ac62ebe966613933baf1714137daeb8c
https://github.com/jenkinsci/jenkins/commit/559566b1ac62ebe966613933baf1714137daeb8c
Author: Daniel Beck <[email protected]>
Date: 2016-01-26 (Tue, 26 Jan 2016)
Changed paths:
M core/src/main/java/hudson/security/csrf/DefaultCrumbIssuer.java
Log Message:
-----------
[FIX SECURITY-245] Compare crumbs in constant time
Commit: 281cd6c69a8af6a8b898b8011fb5bda6d3fcbbfb
https://github.com/jenkinsci/jenkins/commit/281cd6c69a8af6a8b898b8011fb5bda6d3fcbbfb
Author: Daniel Beck <[email protected]>
Date: 2016-01-27 (Wed, 27 Jan 2016)
Changed paths:
M core/src/main/java/hudson/security/csrf/DefaultCrumbIssuer.java
Log Message:
-----------
[SECURITY-245] Add explanation comment
Commit: def5bdb1984705be3c41be8bca4fd387db084eda
https://github.com/jenkinsci/jenkins/commit/def5bdb1984705be3c41be8bca4fd387db084eda
Author: Daniel Beck <[email protected]>
Date: 2016-02-02 (Tue, 02 Feb 2016)
Changed paths:
M core/src/main/java/jenkins/security/ApiTokenProperty.java
Log Message:
-----------
[SECURITY-241] Use US-ASCII to prevent charset issues
Commit: 76d1958ebe17bc89a5e8b249ecc965de728bd669
https://github.com/jenkinsci/jenkins/commit/76d1958ebe17bc89a5e8b249ecc965de728bd669
Author: Daniel Beck <[email protected]>
Date: 2016-02-02 (Tue, 02 Feb 2016)
Changed paths:
M core/src/main/java/hudson/security/csrf/DefaultCrumbIssuer.java
Log Message:
-----------
[SECURITY-245] Use US-ASCII to prevent charset issues
Commit: 919001c84670f9d35c4eb72003640c4a990aaf2f
https://github.com/jenkinsci/jenkins/commit/919001c84670f9d35c4eb72003640c4a990aaf2f
Author: Daniel Beck <[email protected]>
Date: 2016-02-02 (Tue, 02 Feb 2016)
Changed paths:
M core/src/main/java/jenkins/security/ApiTokenProperty.java
Log Message:
-----------
[SECURITY-241] Add explanation for chosen implementation
Commit: 2463ec1384448adc069ac4bc835d5dc9a4f78498
https://github.com/jenkinsci/jenkins/commit/2463ec1384448adc069ac4bc835d5dc9a4f78498
Author: Jesse Glick <[email protected]>
Date: 2016-02-03 (Wed, 03 Feb 2016)
Changed paths:
M core/src/main/java/hudson/security/csrf/DefaultCrumbIssuer.java
Log Message:
-----------
Merge pull request #56 from jenkinsci-cert/SECURITY-245
[FIX SECURITY-245] Compare crumbs in constant time
Commit: 57473e82ce63db47bbaf53383629aa2bd14def26
https://github.com/jenkinsci/jenkins/commit/57473e82ce63db47bbaf53383629aa2bd14def26
Author: Jesse Glick <[email protected]>
Date: 2016-02-03 (Wed, 03 Feb 2016)
Changed paths:
M core/src/main/java/hudson/cli/CLIAction.java
Log Message:
-----------
Merge pull request #54 from jenkinsci-cert/SECURITY-238
[FIX SECURITY-238] Don't echo command name
Commit: fb22305427dfaa69dbd68da7d01607d34bbdbb52
https://github.com/jenkinsci/jenkins/commit/fb22305427dfaa69dbd68da7d01607d34bbdbb52
Author: Jesse Glick <[email protected]>
Date: 2016-02-03 (Wed, 03 Feb 2016)
Changed paths:
M core/src/main/java/jenkins/security/ApiTokenProperty.java
Log Message:
-----------
Merge pull request #55 from jenkinsci-cert/SECURITY-241
[FIX SECURITY-241] Compare API tokens in constant time
Commit: c9cea4f253fa20851bf36110644d37fd42e3f641
https://github.com/jenkinsci/jenkins/commit/c9cea4f253fa20851bf36110644d37fd42e3f641
Author: Jesse Glick <[email protected]>
Date: 2016-02-03 (Wed, 03 Feb 2016)
Changed paths:
M core/src/main/java/hudson/cli/CLIAction.java
M core/src/main/java/hudson/security/csrf/DefaultCrumbIssuer.java
M core/src/main/java/jenkins/security/ApiTokenProperty.java
Log Message:
-----------
Merge branch 'security-stable-1.609' into security-stable-1.625
Commit: 1701ac95756c88ffd956cf2f46d511adf385519c
https://github.com/jenkinsci/jenkins/commit/1701ac95756c88ffd956cf2f46d511adf385519c
Author: Jesse Glick <[email protected]>
Date: 2016-02-03 (Wed, 03 Feb 2016)
Changed paths:
M core/src/main/java/hudson/cli/CLIAction.java
M core/src/main/java/hudson/security/csrf/DefaultCrumbIssuer.java
M core/src/main/java/jenkins/security/ApiTokenProperty.java
Log Message:
-----------
Merge branch 'security-stable-1.625' into security-stable-1.642
Commit: 18cc8e0eb7d8c9910ce8ce2a9c8dab4c4df8b9c2
https://github.com/jenkinsci/jenkins/commit/18cc8e0eb7d8c9910ce8ce2a9c8dab4c4df8b9c2
Author: Daniel Beck <[email protected]>
Date: 2016-02-03 (Wed, 03 Feb 2016)
Changed paths:
M core/src/main/java/hudson/util/XStream2.java
A test/src/test/java/hudson/util/XStream2Security247Test.java
A test/src/test/resources/hudson/util/XStream2Security247Test/config.xml
Log Message:
-----------
[FIX SECURITY-247] Prevent loading of MethodClosure from XML
Commit: 1ec232ca1c80e924d70212313b852aec408aa37e
https://github.com/jenkinsci/jenkins/commit/1ec232ca1c80e924d70212313b852aec408aa37e
Author: Jesse Glick <[email protected]>
Date: 2016-02-03 (Wed, 03 Feb 2016)
Changed paths:
M pom.xml
A test/src/test/java/jenkins/security/Security232Test.java
Log Message:
-----------
[FIXED SECURITY-232] Integrating Remoting build with blacklist.
Commit: aa8b855af393543d490c879ea037bfced0cf4b61
https://github.com/jenkinsci/jenkins/commit/aa8b855af393543d490c879ea037bfced0cf4b61
Author: Daniel Beck <[email protected]>
Date: 2016-02-04 (Thu, 04 Feb 2016)
Changed paths:
M test/src/test/java/hudson/util/XStream2Security247Test.java
M test/src/test/resources/hudson/util/XStream2Security247Test/config.xml
Log Message:
-----------
[SECURITY-247] Added doCreateItem test, improved loading test
Commit: 1870fb817e8173144fb765c00764657903461130
https://github.com/jenkinsci/jenkins/commit/1870fb817e8173144fb765c00764657903461130
Author: Daniel Beck <[email protected]>
Date: 2016-02-04 (Thu, 04 Feb 2016)
Changed paths:
M core/src/main/java/hudson/util/XStream2.java
Log Message:
-----------
[SECURITY-247] Reuse remoting's ClassFilter for better coverage
Commit: 37cea0a5e22fead9126cbf5ef5937f2cc953d9cc
https://github.com/jenkinsci/jenkins/commit/37cea0a5e22fead9126cbf5ef5937f2cc953d9cc
Author: Daniel Beck <[email protected]>
Date: 2016-02-04 (Thu, 04 Feb 2016)
Changed paths:
M core/src/main/java/hudson/util/XStream2.java
Log Message:
-----------
[SECURITY-247] Need to call both overloads
Commit: 27075c4febe2b84605425cd3a463d4d3fda853bd
https://github.com/jenkinsci/jenkins/commit/27075c4febe2b84605425cd3a463d4d3fda853bd
Author: Jesse Glick <[email protected]>
Date: 2016-02-04 (Thu, 04 Feb 2016)
Changed paths:
M pom.xml
Log Message:
-----------
Updated snapshot
Commit: 7f202f0317e60cd3160f61467b8558f864f83f41
https://github.com/jenkinsci/jenkins/commit/7f202f0317e60cd3160f61467b8558f864f83f41
Author: Jesse Glick <[email protected]>
Date: 2016-02-10 (Wed, 10 Feb 2016)
Changed paths:
M core/src/main/java/hudson/util/XStream2.java
A test/src/test/java/hudson/util/XStream2Security247Test.java
A test/src/test/resources/hudson/util/XStream2Security247Test/config.xml
Log Message:
-----------
Merge pull request #60 from jenkinsci-cert/SECURITY-247-v2
[FIX SECURITY-247] Prevent loading of MethodClosure from XML
Commit: 0a1e46570d9c84f4525cba09a3b43f723fc0fe96
https://github.com/jenkinsci/jenkins/commit/0a1e46570d9c84f4525cba09a3b43f723fc0fe96
Author: Jesse Glick <[email protected]>
Date: 2016-02-10 (Wed, 10 Feb 2016)
Changed paths:
M pom.xml
A test/src/test/java/jenkins/security/Security232Test.java
Log Message:
-----------
Merge pull request #61 from jenkinsci-cert/SECURITY-232
[SECURITY-232] Integrating Remoting build with blacklist
Commit: 1211ff9276f593c0c35ba69275b6a6d4263e09eb
https://github.com/jenkinsci/jenkins/commit/1211ff9276f593c0c35ba69275b6a6d4263e09eb
Author: Jesse Glick <[email protected]>
Date: 2016-02-10 (Wed, 10 Feb 2016)
Changed paths:
M core/src/main/java/hudson/util/XStream2.java
M pom.xml
A test/src/test/java/hudson/util/XStream2Security247Test.java
A test/src/test/java/jenkins/security/Security232Test.java
A test/src/test/resources/hudson/util/XStream2Security247Test/config.xml
Log Message:
-----------
Merge branch 'security-stable-1.609' into security-stable-1.625
Commit: 0292f680b8083d9a0e14a714f7178d6dc762f2c6
https://github.com/jenkinsci/jenkins/commit/0292f680b8083d9a0e14a714f7178d6dc762f2c6
Author: Jesse Glick <[email protected]>
Date: 2016-02-10 (Wed, 10 Feb 2016)
Changed paths:
M changelog.html
M
core/src/filter/resources/hudson/model/UpdateCenter/CoreUpdateMonitor/message.properties
M core/src/main/java/hudson/ExtensionFinder.java
M core/src/main/java/hudson/model/Computer.java
M core/src/main/java/hudson/model/Executor.java
M core/src/main/java/hudson/model/UsageStatistics.java
M
core/src/main/java/hudson/security/FullControlOnceLoggedInAuthorizationStrategy.java
M core/src/main/java/hudson/security/LegacyAuthorizationStrategy.java
M core/src/main/java/hudson/slaves/OfflineCause.java
M core/src/main/java/hudson/slaves/RetentionStrategy.java
M core/src/main/java/jenkins/model/Jenkins.java
M
core/src/main/resources/hudson/model/UpdateCenter/CoreUpdateMonitor/message.jelly
M core/src/main/resources/windows-service/jenkins.xml
M test/src/test/java/hudson/model/ComputerTest.java
Log Message:
-----------
Merge branch 'stable-1.642' into security-stable-1.642
Commit: f4c22155d238ee5089751668f55c3a0573fcfdba
https://github.com/jenkinsci/jenkins/commit/f4c22155d238ee5089751668f55c3a0573fcfdba
Author: Jesse Glick <[email protected]>
Date: 2016-02-10 (Wed, 10 Feb 2016)
Changed paths:
M core/src/main/java/hudson/util/XStream2.java
M pom.xml
A test/src/test/java/hudson/util/XStream2Security247Test.java
A test/src/test/java/jenkins/security/Security232Test.java
A test/src/test/resources/hudson/util/XStream2Security247Test/config.xml
Log Message:
-----------
Merge branch 'security-stable-1.625' into security-stable-1.642
Commit: d6bcfdac70bf8b1a8004420f8ce9b7b30ced7159
https://github.com/jenkinsci/jenkins/commit/d6bcfdac70bf8b1a8004420f8ce9b7b30ced7159
Author: Jesse Glick <[email protected]>
Date: 2016-02-11 (Thu, 11 Feb 2016)
Changed paths:
M core/src/main/java/hudson/util/XStream2.java
M pom.xml
Log Message:
-----------
Integrating newer remoting snapshot, and adding better diagnostics to
BlacklistedTypesConverter.
Commit: 436c138b0a31a3e208de106f1a26f5d01a78a380
https://github.com/jenkinsci/jenkins/commit/436c138b0a31a3e208de106f1a26f5d01a78a380
Author: Jesse Glick <[email protected]>
Date: 2016-02-11 (Thu, 11 Feb 2016)
Changed paths:
M core/src/main/java/hudson/util/XStream2.java
M pom.xml
Log Message:
-----------
Merge branch 'security-stable-1.609' into security-stable-1.625
Commit: 1270a5e1f69c4d9e9c0e52fe857957b5fde8f2b5
https://github.com/jenkinsci/jenkins/commit/1270a5e1f69c4d9e9c0e52fe857957b5fde8f2b5
Author: Jesse Glick <[email protected]>
Date: 2016-02-11 (Thu, 11 Feb 2016)
Changed paths:
M core/src/main/java/hudson/util/XStream2.java
M pom.xml
Log Message:
-----------
Merge branch 'security-stable-1.625' into security-stable-1.642
Commit: c17edc31d23df233e9e3c14743910e70fbaf7e75
https://github.com/jenkinsci/jenkins/commit/c17edc31d23df233e9e3c14743910e70fbaf7e75
Author: Kohsuke Kawaguchi <[email protected]>
Date: 2016-02-24 (Wed, 24 Feb 2016)
Changed paths:
M core/src/main/java/hudson/cli/CLIAction.java
M core/src/main/java/hudson/security/csrf/DefaultCrumbIssuer.java
M core/src/main/java/hudson/util/XStream2.java
M core/src/main/java/jenkins/security/ApiTokenProperty.java
M pom.xml
A test/src/test/java/hudson/util/XStream2Security247Test.java
A test/src/test/java/jenkins/security/Security232Test.java
A test/src/test/resources/hudson/util/XStream2Security247Test/config.xml
Log Message:
-----------
Merge remote-tracking branch 'security/security-stable-1.642' into
stable-1.642
Commit: 630da0319ff05a2da66a6ed78da33e372b95b8b4
https://github.com/jenkinsci/jenkins/commit/630da0319ff05a2da66a6ed78da33e372b95b8b4
Author: Kohsuke Kawaguchi <[email protected]>
Date: 2016-02-24 (Wed, 24 Feb 2016)
Changed paths:
M pom.xml
Log Message:
-----------
Using a released version
Commit: 60147b3c96b90f728458a00c564d7fca0e359784
https://github.com/jenkinsci/jenkins/commit/60147b3c96b90f728458a00c564d7fca0e359784
Author: Kohsuke Kawaguchi <[email protected]>
Date: 2016-02-24 (Wed, 24 Feb 2016)
Changed paths:
M cli/pom.xml
M core/pom.xml
M plugins/pom.xml
M pom.xml
M test/pom.xml
M war/pom.xml
Log Message:
-----------
[maven-release-plugin] prepare release jenkins-1.642.2
Commit: 62efa0b088428ebb96b841de2bd8ecbaeee0a003
https://github.com/jenkinsci/jenkins/commit/62efa0b088428ebb96b841de2bd8ecbaeee0a003
Author: Kohsuke Kawaguchi <[email protected]>
Date: 2016-02-24 (Wed, 24 Feb 2016)
Changed paths:
M cli/pom.xml
M core/pom.xml
M plugins/pom.xml
M pom.xml
M test/pom.xml
M war/pom.xml
Log Message:
-----------
[maven-release-plugin] prepare for next development iteration
Commit: eed343f7d19aeb15cd8411fb257233a1b41134bb
https://github.com/jenkinsci/jenkins/commit/eed343f7d19aeb15cd8411fb257233a1b41134bb
Author: Kohsuke Kawaguchi <[email protected]>
Date: 2016-03-02 (Wed, 02 Mar 2016)
Changed paths:
M core/src/main/java/jenkins/model/lazy/AbstractLazyLoadRunMap.java
M core/src/main/resources/hudson/model/ParametersAction/index.jelly
M core/src/test/java/jenkins/model/lazy/AbstractLazyLoadRunMapTest.java
Log Message:
-----------
Merge branch 'stable-1.642' of github.com:jenkinsci/jenkins into stable-1.642
Compare:
https://github.com/jenkinsci/jenkins/compare/383a5aec5163...eed343f7d19a
--
You received this message because you are subscribed to the Google Groups
"Jenkins Commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
