Commit graph

11 commits

Author SHA1 Message Date
ryoon
6cce1e2240 Update to 1.509.1
Changelog:
What's new in 1.509.1 (2013/05/01)

    FilePath.installIfNecessaryFrom routes download over remoting channel (issue 17330)
    Add 'Are you sure' on Reload configuration from disk (issue 15340)
    MavenAbstractArtifactRecord.doRedeploy should require POST (SECURITY-69)
    Hover-over "Build Now" broken for parameterized jobs: "This page expects a form submission" (issue 17110)
    XSS issue, where an internal attacker can cause a remote stylesheet to be loaded and containing scripts executed. (SECURITY-67)
    CVE-2013-1808 stapler-adjunct-zeroclipboard: XSS via copying XSS payload into buffer (SECURITY-71)
    Jenkins.doEval checks ADMINISTER rather than RUN_SCRIPTS; doScript CSRF (SECURITY-63)
    Jenkins is no more WinXP compliant : CreateSymbolicLinkW is not available (issue 17343)
2013-05-09 15:16:55 +00:00
ryoon
96db2e6236 Update to 1.480.3
* Fix https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16

Changelog:
What's new in 1.480.3 (2013/02/15)

    "Remember me on this computer" does not work, cookie is not accepted in new session (issue 16278)
    Slow/hung web UI in 1.483+ (stuck in parseURI) (issue 16474)
    Failure to delete old config files during rekeying on Windows (issue 16319)
    NoClassDefFoundError on Base64 when launching an headless slave with -jnlpCredential option (issue 9679)
    Loading asynchPeople calls (synch) People constructor (issue 16397)
    Jenkins briefly displays build queue and then it disappears until the page is reloaded (issue 15335)
    View.hasPeople too slow to use in sidepanel.jelly (issue 16244)
    XSS (SECURITY-46)
    File parameter causing data lost after Jenkins restart (issue 13536)
2013-02-19 18:21:41 +00:00
ryoon
42f1ce8bfe Update to 1.480.2
Fix http://secunia.com/advisories/51712 .

Changelog:
What's new in 1.480.2 (2013/01/06)
    The master key that was protecting all the sensitive data in $JENKINS_HOME was vulnerable. (SECURITY-49)
2013-01-12 11:16:26 +00:00
ryoon
25618a5f8f Update to 1.480.1
Changelog:
What's new in 1.480.1 (2012/11/17)

    FilePath.validateAntFileMask too slow for /configure (issue 7214)
    java.io.InvalidClassException (issue 14667)
    Log recorders do not work reliably (issue 15226)
    Invalid JSON is produced during remote api operations when a changeSet contains duplicate keys. (issue 13336)
    Memory exhaustion parsing large test stdio from Surefire (issue 15382)
    Fixed security vulnerabilities. (SECURITY-43,SECURITY-44,SECURITY-45)
2012-11-26 14:22:14 +00:00
ryoon
bf162e6114 Update to 1.466.2
* Fix two security bugs

Changelog:
Changes in 1.466.2 is unavailable.

What's new in 1.466.1 (2012/07/23)

    A current active build in the build history is lost if the job configuration XML uploaded (issue 12318)
    UnprotectedRootAction doesn't work for /github-webhook/ (issue 14113)
    ERR_CONTENT_DECODING_FAILED returned on testResults and console output after Jenkins reload (issue 13625)
    Cannot parse coverage results Premature end of file. (issue 11251)
2012-09-19 11:09:54 +00:00
ryoon
2449ad2b72 Update to 1.447.2
Changelog:
What's new in 1.447.2 (2012/06/11)

    Guice injector failure can cause failure of whole Jenkins (issue 13448)
    Jenkins runs out of file descriptors (winstone problem) (issue 9882)
    Parsing of POM happens before SNAPSHOT-Parents are updated (issue 8663)
    Loading All Build History Fails (issue 13238)
2012-07-13 18:41:45 +00:00
ryoon
cafcba339a Update to 1.447.1
Changelog:
What's new in 1.447.1 (2012/03/28)

    File handle leak in serving static files (issue 13097)
    LDAP config error (issue 8152)
    jenkins running in Tomcat doesn't initalize slf4j properly (issue 12650)
    java.lang.NoClassDefFoundError: org.slf4j.impl.StaticLoggerBinder (issue 12446)
    Remote call on CLI channel from [ip] failed (issue 12302)
    jenkins does not start in jboss container (issue 12334)
2012-05-24 18:12:11 +00:00
ryoon
2f268b15e3 Update to 1.424.6
* Fix security bug in Jenkins Core.
  See https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2012-03-05
2012-03-11 11:44:37 +00:00
ryoon
f956b55ca8 Update to 1.424.3
Changelog:
What's new in 1.424.3 (2012/02/27)
    upgrade Apache Maven Wagon to 2.0 (issue 11164)
    ERROR at Matrix-based security (issue 9519)
    NPE: Failed to record SCM polling (issue 11592)
    JDK Auto install throws FATAL: org/apache/xml/utils/PrefixResolver (issue 11420)
    NoSuchMethodError on slf4j (issue 11960)
2012-03-02 06:55:40 +00:00
ryoon
8d99166478 Update to 1.424.2
* This release contains security fix.
  See http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-01-10.cb

Changelog:
* Viewing large console logs with timestamper plugin cause Jenkins
  to crash (issue 9349)
* Maven3 parallel build fails with java.util.ConcurrentModificationException
  in Jenkins (issue 11256)
* Jenkins PID changes after restart (issue 11742)
* Running Jenkins with the bundeled Winstone is succeptible to the hash table
  attack http://www.ocert.org/advisories/ocert-2011-003.html (SECURITY-22)
2012-01-19 14:39:21 +00:00
ryoon
765da6ff0e Import jenkins-1.424.1 as devel/jenkins
Jenkins is an award-winning application that monitors executions
of repeated jobs, such as building a software project or jobs run
by cron. Among those things, current Jenkins focuses on the following
two jobs:

1. Building/testing software projects continuously, just like
CruiseControl or DamageControl. In a nutshell, Jenkins provides an
easy-to-use so-called continuous integration system, making it
easier for developers to integrate changes to the project, and
making it easier for users to obtain a fresh build. The automated,
continuous build increases the productivity.

2. Monitoring executions of externally-run jobs, such as cron jobs
and procmail jobs, even those that are run on a remote machine.
For example, with cron, all you receive is regular e-mails that
capture the output, and it is up to you to look at them diligently
and notice when it broke. Jenkins keeps those outputs and makes it
easy for you to notice when something is wrong.

This is Long-Term Support Release.

Tested on NetBSD/i386 5.99.58 with apache-tomcat7 and openjdk7.
2011-12-08 14:09:25 +00:00