|
||||||||
|
This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira |
||||||||
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
For more options, visit https://groups.google.com/d/optout.
Code changed in jenkins
User: Kohsuke Kawaguchi
Path:
pom.xml
http://jenkins-ci.org/commit/email-ext-plugin/985892a861802c5ad0accd3d8e93abfcc4e1f48d
Log:
JENKINS-25348
Avoid having multiple copies of groovy-sandbox.jar in the Jenkins JVM,
which compromises the security.
I think it makes sense for the script-security plugin to own this
library, so instead let's depend on that plugin to provide a canonical
copy.
There's still a separate fix that needs to happen in script-security
plugin and its client plugins, but in the mean time this fix plugs the
hole as email-ext-plugin is the only other plugin in the jenkinsci org
that brings its own copy of groovy-sandbox