Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backporting for 2.387.1 #7650

Merged
merged 6 commits into from
Feb 15, 2023

Conversation

NotMyFault
Copy link
Member

@NotMyFault NotMyFault commented Feb 14, 2023

Latest core version: jenkins-2.391

Fixed
-----

JENKINS-70487           Minor                   2.389
        Backport script-security update into next LTS baseline
        https://issues.jenkins.io/browse/JENKINS-70487

JENKINS-70394           Major                   2.389
        Button 'Bring this node back online' is broken (regression in 2.385)
        regression
        https://issues.jenkins.io/browse/JENKINS-70394

JENKINS-70533           Minor                   2.390
        Failure to collect telemetry submits empty payload
        https://issues.jenkins.io/browse/JENKINS-70533

JENKINS-70571           Minor                   2.390
        Update bundled Apache Mina-sshd plugins from 2.9.1 to 2.9.2
        https://issues.jenkins.io/browse/JENKINS-70571

JENKINS-70531           Major                   2.390
        WebSocket agent write operations can block indefinitely
        https://issues.jenkins.io/browse/JENKINS-70531

JENKINS-70334           Major                   2.388
        When TcpSlaveAgentListener dies it is not restarted
        https://issues.jenkins.io/browse/JENKINS-70334

dependabot bot and others added 6 commits February 10, 2023 19:22
…_6 (jenkinsci#7600)

Bumps [script-security](https://github.com/jenkinsci/script-security-plugin) from 1228.vd93135a_2fb_25 to 1229.v4880b_b_e905a_6.
- [Release notes](https://github.com/jenkinsci/script-security-plugin/releases)
- [Changelog](https://github.com/jenkinsci/script-security-plugin/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jenkinsci/script-security-plugin/commits)

---
updated-dependencies:
- dependency-name: org.jenkins-ci.plugins:script-security
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 20b8432)
… app-bar (jenkinsci#7577)

* Move 'set node temporarily offline/online' buttons to app-bar

As describe in JENKINS-70394 are the to set the node temp. online/offline not clickable, because the offline-cause warning covers this buttons.

* PR review

* fix node name on built-in node page

* Move additional controls to app-bar

Co-authored-by: Tim Jacomb <timjacomb1@gmail.com>
(cherry picked from commit 10382b1)
…enkinsci#7618)

Co-authored-by: Daniel Beck <daniel-beck@users.noreply.github.com>
(cherry picked from commit 6b4dd60)
Embed Apache mina sshd plugins 2.9.2 (common and core)

Update `sshd-common` plugin and `sshd-core` plugin from
2.9.1-44.v476733c11f82 to 2.9.2-50.va_0e1f42659a_a

Changelog

https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.2.md
links to http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45047
Unsafe deserialization in SimpleGeneratorHostKeyProvider

Jenkins core does not reference the SimpleGeneratorHostKeyProvider class.

It is referenced from sshd plugin at
https://github.com/jenkinsci/sshd-plugin/blob/251d59011530b4d3a4db4a3e6ee8f076c61c3bfe/src/main/java/org/jenkinsci/main/modules/sshd/SSHD.java#L162

Users can upgrade the plugin themselves during installation but it is
easier if we bundle the updated plugin version with new releases rather
than requiring that the user perform the update.

(cherry picked from commit 31974d3)
…i#7596)

* Apply timeout on WebSocket write operations
* jenkinsci/remoting#621 released

(cherry picked from commit e0aee59)
…enkinsci#7547)

Co-authored-by: Basil Crow <me@basilcrow.com>
(cherry picked from commit 5755957)
@NotMyFault NotMyFault added the into-lts This PR is filed against an LTS branch label Feb 14, 2023
@NotMyFault NotMyFault requested a review from timja February 14, 2023 17:37
@NotMyFault NotMyFault mentioned this pull request Feb 14, 2023
35 tasks
@NotMyFault NotMyFault merged commit bf418c7 into jenkinsci:stable-2.387 Feb 15, 2023
@NotMyFault NotMyFault deleted the backporting-2.387.1 branch February 15, 2023 09:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
into-lts This PR is filed against an LTS branch
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants