-
Bug
-
Resolution: Fixed
-
Critical
-
Jenkins 2.3
delivery-pipeline plugin 0.9.9
SECURITY-170 / CVE-2016-3721
After upgrading to Jenkins 2.2
delivery-pipeline plugin 0.9.9
The environment variable PIPELINE_VERSION doesn't get created and stored for the initial job. This is due to SECURITY-170 / CVE-2016-3721. Please see https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11.
Original behaviour can be restored for testing purposes by setting hudson.model.ParametersAction.keepUndefinedParameters=true
- is related to
-
JENKINS-38062 "Create Delivery Pipeline version" errors
- Open