← Back to branch summary

~canonical-ci-engineering/ubuntu-ci-services-itself/jenkins

~canonical-ci-engineering/ubuntu-ci-services-itself/jenkins

Viewing all changes in revision 14.

Committer: Package Import Robot
Author(s): James Page
Date: 2012-09-25 11:01:53 UTC
Revision ID: package-import@ubuntu.com-20120925110153-vyh5udpwtm0n7px7

Tags: 1.447.2+dfsg-2

http://bugs.debian.org/688298

* Fix multiple security issues in Jenkins core (Closes: #688298):
  - d/p/security/CVE-2012-4438_CVE-2012-4439.patch: Cherry picked
    fixes from 1.466.2 release to resolve remote code execution
    and XSS security vulnerabilities.
  - d/rules: Tweaked handling of groovy -> java source file copy to
    accommodate the file created by the above patch.
  - Fixes: CVE-2012-4438, CVE-2012-4439

files added:
.pc/.quilt_patches

.pc/.quilt_series

.pc/security

.pc/security/CVE-2012-4438_CVE-2012-4439.patch

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/model

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/model/DownloadService.java

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/model/UpdateSite.java

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/search

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/search/Search.java

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/tasks

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/tasks/junit

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/tasks/junit/History.java

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/jenkins

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/jenkins/util

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/jenkins/util/JSONSignatureValidator.java

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/resources

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/resources/hudson

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/resources/hudson/tasks

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/resources/hudson/tasks/junit

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/resources/hudson/tasks/junit/History

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/resources/hudson/tasks/junit/History/index.jelly

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/war

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/war/src

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/war/src/main

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/war/src/main/webapp

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/war/src/main/webapp/scripts

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/war/src/main/webapp/scripts/hudson-behavior.js

core/src/main/java/jenkins/util

core/src/main/java/jenkins/util/JSONSignatureValidator.java

debian/patches/security

debian/patches/security/CVE-2012-4438_CVE-2012-4439.patch

files modified:
.pc/applied-patches

core/src/main/java/hudson/model/DownloadService.java

core/src/main/java/hudson/model/UpdateSite.java

core/src/main/java/hudson/search/Search.java

core/src/main/java/hudson/tasks/junit/History.java

core/src/main/resources/hudson/tasks/junit/History/index.jelly

debian/changelog

debian/patches/series

debian/rules

war/src/main/webapp/scripts/hudson-behavior.js

Show diffs side-by-side

added added

removed removed

.pc/.quilt_patches

.pc/.quilt_series

.pc/applied-patches

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/model/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/model/DownloadService.java

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/model/UpdateSite.java

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/search/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/search/Search.java

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/tasks/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/tasks/junit/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/hudson/tasks/junit/History.java

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/jenkins/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/jenkins/util/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/java/jenkins/util/JSONSignatureValidator.java

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/resources/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/resources/hudson/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/resources/hudson/tasks/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/resources/hudson/tasks/junit/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/resources/hudson/tasks/junit/History/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/core/src/main/resources/hudson/tasks/junit/History/index.jelly

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/war/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/war/src/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/war/src/main/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/war/src/main/webapp/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/war/src/main/webapp/scripts/

.pc/security/CVE-2012-4438_CVE-2012-4439.patch/war/src/main/webapp/scripts/hudson-behavior.js

core/src/main/java/hudson/model/DownloadService.java

core/src/main/java/hudson/model/UpdateSite.java

core/src/main/java/hudson/search/Search.java

core/src/main/java/hudson/tasks/junit/History.java

core/src/main/java/jenkins/util/

core/src/main/java/jenkins/util/JSONSignatureValidator.java

core/src/main/resources/hudson/tasks/junit/History/index.jelly

debian/changelog

debian/patches/security/

debian/patches/security/CVE-2012-4438_CVE-2012-4439.patch

debian/patches/series

war/src/main/webapp/scripts/hudson-behavior.js

Older »