Commit graph

10 commits

Author SHA1 Message Date
ryoon
104880563f Update to 1.480.3
* Fix https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16

Changelog:
What's new in 1.480.3 (2013/02/15)

    "Remember me on this computer" does not work, cookie is not accepted in new session (issue 16278)
    Slow/hung web UI in 1.483+ (stuck in parseURI) (issue 16474)
    Failure to delete old config files during rekeying on Windows (issue 16319)
    NoClassDefFoundError on Base64 when launching an headless slave with -jnlpCredential option (issue 9679)
    Loading asynchPeople calls (synch) People constructor (issue 16397)
    Jenkins briefly displays build queue and then it disappears until the page is reloaded (issue 15335)
    View.hasPeople too slow to use in sidepanel.jelly (issue 16244)
    XSS (SECURITY-46)
    File parameter causing data lost after Jenkins restart (issue 13536)
2013-02-19 18:21:41 +00:00
ryoon
cddcf6e4b2 Update to 1.480.2
Fix http://secunia.com/advisories/51712 .

Changelog:
What's new in 1.480.2 (2013/01/06)
    The master key that was protecting all the sensitive data in $JENKINS_HOME was vulnerable. (SECURITY-49)
2013-01-12 11:16:26 +00:00
ryoon
10840f509f Update to 1.480.1
Changelog:
What's new in 1.480.1 (2012/11/17)

    FilePath.validateAntFileMask too slow for /configure (issue 7214)
    java.io.InvalidClassException (issue 14667)
    Log recorders do not work reliably (issue 15226)
    Invalid JSON is produced during remote api operations when a changeSet contains duplicate keys. (issue 13336)
    Memory exhaustion parsing large test stdio from Surefire (issue 15382)
    Fixed security vulnerabilities. (SECURITY-43,SECURITY-44,SECURITY-45)
2012-11-26 14:22:14 +00:00
ryoon
355cf91a4f Update to 1.466.2
* Fix two security bugs

Changelog:
Changes in 1.466.2 is unavailable.

What's new in 1.466.1 (2012/07/23)

    A current active build in the build history is lost if the job configuration XML uploaded (issue 12318)
    UnprotectedRootAction doesn't work for /github-webhook/ (issue 14113)
    ERR_CONTENT_DECODING_FAILED returned on testResults and console output after Jenkins reload (issue 13625)
    Cannot parse coverage results Premature end of file. (issue 11251)
2012-09-19 11:09:54 +00:00
ryoon
454baa1175 Update to 1.447.2
Changelog:
What's new in 1.447.2 (2012/06/11)

    Guice injector failure can cause failure of whole Jenkins (issue 13448)
    Jenkins runs out of file descriptors (winstone problem) (issue 9882)
    Parsing of POM happens before SNAPSHOT-Parents are updated (issue 8663)
    Loading All Build History Fails (issue 13238)
2012-07-13 18:41:45 +00:00
ryoon
ba31d86f32 Update to 1.447.1
Changelog:
What's new in 1.447.1 (2012/03/28)

    File handle leak in serving static files (issue 13097)
    LDAP config error (issue 8152)
    jenkins running in Tomcat doesn't initalize slf4j properly (issue 12650)
    java.lang.NoClassDefFoundError: org.slf4j.impl.StaticLoggerBinder (issue 12446)
    Remote call on CLI channel from [ip] failed (issue 12302)
    jenkins does not start in jboss container (issue 12334)
2012-05-24 18:12:11 +00:00
ryoon
c805128b8e Update to 1.424.6
* Fix security bug in Jenkins Core.
  See https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2012-03-05
2012-03-11 11:44:37 +00:00
ryoon
332cbf76f7 Update to 1.424.3
Changelog:
What's new in 1.424.3 (2012/02/27)
    upgrade Apache Maven Wagon to 2.0 (issue 11164)
    ERROR at Matrix-based security (issue 9519)
    NPE: Failed to record SCM polling (issue 11592)
    JDK Auto install throws FATAL: org/apache/xml/utils/PrefixResolver (issue 11420)
    NoSuchMethodError on slf4j (issue 11960)
2012-03-02 06:55:40 +00:00
ryoon
7724280d6c Update to 1.424.2
* This release contains security fix.
  See http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-01-10.cb

Changelog:
* Viewing large console logs with timestamper plugin cause Jenkins
  to crash (issue 9349)
* Maven3 parallel build fails with java.util.ConcurrentModificationException
  in Jenkins (issue 11256)
* Jenkins PID changes after restart (issue 11742)
* Running Jenkins with the bundeled Winstone is succeptible to the hash table
  attack http://www.ocert.org/advisories/ocert-2011-003.html (SECURITY-22)
2012-01-19 14:39:21 +00:00
ryoon
f8d8be4571 Import jenkins-1.424.1 as devel/jenkins
Jenkins is an award-winning application that monitors executions
of repeated jobs, such as building a software project or jobs run
by cron. Among those things, current Jenkins focuses on the following
two jobs:

1. Building/testing software projects continuously, just like
CruiseControl or DamageControl. In a nutshell, Jenkins provides an
easy-to-use so-called continuous integration system, making it
easier for developers to integrate changes to the project, and
making it easier for users to obtain a fresh build. The automated,
continuous build increases the productivity.

2. Monitoring executions of externally-run jobs, such as cron jobs
and procmail jobs, even those that are run on a remote machine.
For example, with cron, all you receive is regular e-mails that
capture the output, and it is up to you to look at them diligently
and notice when it broke. Jenkins keeps those outputs and makes it
easy for you to notice when something is wrong.

This is Long-Term Support Release.

Tested on NetBSD/i386 5.99.58 with apache-tomcat7 and openjdk7.
2011-12-08 14:09:25 +00:00