[ovirt] #46: upgrade jenkins.ovirt.org to latest LTS version
ovirt
trac at fedorahosted.org
Thu May 2 14:24:24 UTC 2013
#46: upgrade jenkins.ovirt.org to latest LTS version
-----------------------+------------------------
Reporter: eedri | Owner: infra@…
Type: outage | Status: new
Priority: critical | Milestone: oVirt 3.3
Component: Jenkins | Version: Production
Severity: High | Keywords:
Blocked By: | Blocking:
-----------------------+------------------------
due to recent security vulnerabilities we must upgrade our jenkins master
server.
What's new in 1.509.1 (2013/05/01)
FilePath.installIfNecessaryFrom routes download over remoting channel
(issue 17330)
Add 'Are you sure' on Reload configuration from disk (issue 15340)
MavenAbstractArtifactRecord.doRedeploy should require POST (SECURITY-69)
Hover-over "Build Now" broken for parameterized jobs: "This page expects a
form submission" (issue 17110)
XSS issue, where an internal attacker can cause a remote stylesheet to be
loaded and containing scripts executed. (SECURITY-67)
CVE-2013-1808 stapler-adjunct-zeroclipboard: XSS via copying XSS payload
into buffer (SECURITY-71)
Jenkins.doEval checks ADMINISTER rather than RUN_SCRIPTS; doScript CSRF
(SECURITY-63)
Jenkins is no more WinXP compliant : CreateSymbolicLinkW is not available
(issue 17343)
probably best to backup the configuration 1st and then upgrade.
--
Ticket URL: <https://fedorahosted.org/ovirt/ticket/46>
ovirt <http://www.ovirt.org/>
oVirt - virtualization made easy.
More information about the Infra
mailing list