Bug#688298: jenkins: Multiple security issues

[James Page]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Moritz

On 21/09/12 09:16, Moritz Muehlenhoff wrote:
> Please see
> http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-09-17.cb
>
>  CVE IDs have been assigned: 
> http://seclists.org/oss-sec/2012/q3/521
> 
> Remember Debian is frozen, so please upload only minimal fixes and
> and ask for a freeze exception by filing a bug against
> release.debian.org
> 
> Cheers, Moritz

I've contacted upstream for some co-operation on this and future
security issues; I've been able to cherry pick security fixes before
but this time its not obvious.

I'll upload fixes as soon as I have them

Cheers

James

- -- 
James Page
Ubuntu Core Developer
Debian Maintainer
james.page at ubuntu.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/

iQIcBAEBCAAGBQJQYDBoAAoJEL/srsug59jD2LsQAL7CVixd0JRPyfRFUvqtVZ/Y
Ewg0eOeZdedjSDfDo3hxvPutfOjQ/4vZaKN0QAPkqil4zbI60qni8MmjduhfZ+2G
8CSbSZlvpN1/WwVoJX0LJm4Ig+aYo1XEBRAt0qi6IFWOEctFbzjkKfzmIHdKhLt4
kXpT6UP3aP8+86rf4gWm/NKkKSvAgiJ1eQGBpcP2lMnLZz7RLNv+2eK3kbJ3xi6K
LI/vISH6hGqF/kFCuyteR7N3UPObxnqBeCzu5QsvwULrM1ofN6VXA8Ww52412G2T
MuOClqDURYpIaJY8R/HonUPSMkzPh+j/JGMxp2QCtjjzjCNFKE2UNNCA/YQ6mf1+
cE0XhGWQ+t2T+wZVPc1FrS0es2dGOcaYH5+v7Iy8If/+HSye2J/y90AnJ2mKrGCB
iG3hTD/YurPRtKEgJnYpHbcykUWmKWUjaIWlOkHPsTSMRKWBc5BEYzXI7AQsZ+fD
+9Goh4lHSf52443+kLuFtaQ0xltX+/zjzq5XZrBPU/fLZ7q0iWGI7fjAOqD7MNax
RdTCuaDYDHryrO05sPmy1vIkrTyI0rykbJvJ3QL1aI6SqnBKJw07e8PfYNuafKcg
UBa8BygMLHLBSYvms3ByyhqST4vkNuvtYh6sQ+rp/iF5Rr8TdKvqSZJmn2Py50IQ
7SpzJlYATbUZO1w2Zp54
=tw2r
-----END PGP SIGNATURE-----