lp:~james-page/ubuntu/oneiric/jenkins/fix-xss

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #889181: XSS vulnerability in Jenkins error pages when running in standalone mode

High

Fix Released

Link a bug report

Related blueprints

6. By James Page on 2011-11-22

SECURITY UPDATE: Rebuild to pickup new version of jenkins-winstone
to close out XSS security vulnerability (LP: #889181).

5. By James Page on 2011-10-11

* Resolve conflict between winstone and libservlet2.5-java (LP: #862272):
  - debian/jenkins.upstart: Use java.net.URLClassLoader instead of
    standard WebAppClassloader to ensure the winstone classes are used.

4. By James Page on 2011-09-16

* Fix FTBFS with asm3 >= 3.3 (LP: #851659):
  - d/maven.rules: Use asm-all instead of asm to align to restructure
    of jar files.

3. By James Page on 2011-09-06

* Resolved issue with specific group being set in upstart
  configuration (LP: #820938).
* Rebuild to pickup new versions of jenkins-xstream to enable ARM
  compatibility (LP: #827463).
* Rebuild to pickup new versions of jcaptcha and jenkins-winstone to
  resolve compatibiltiy issues with libservlet2.5-java (LP: #827651).
* Fix FTBFS due to missing fonts causing test failure in Jenkins core:
   - debian/control: added ttf-dejavu-core to Build-Depends-Indep.
* Fix FTBFS due to change in location of jtidy maven artifact:
   - debian/maven.rules: switch jtidy -> net.sf.jtidy to pickup new
     location.

2. By James Page on 2011-07-20

Initial release.

1. By James Page on 2011-07-20

Import upstream version 1.409.1