Details
-
Story
-
Status: Resolved (View Workflow)
-
Major
-
Resolution: Fixed
Description
Attachments
Issue Links
- depends on
-
JENKINS-41765 groovy CLI command cannot be used with stdin via SSH
-
- Resolved
-
- is blocked by
-
JENKINS-43517 CLI requests a passphrase when run in default http mode
-
- Open
-
-
JENKINS-21695 IllegalStateException: WRITER masks original exception
-
- Resolved
-
-
JENKINS-43666 HTTP full-duplex channel timeout from FullDuplexHttpService.download
-
- Resolved
-
-
JENKINS-46659 TimeoutException from Jetty 9 not recoverable
-
- Resolved
-
- is related to
-
JENKINS-26463 Split CLI out of core
-
- Open
-
- relates to
-
JENKINS-11560 CLI hangs through reverse proxy with JNLP disabled
-
- Open
-
-
JENKINS-7052 SEVERE: I/O error in channel HTTP full-duplex channel
-
- Open
-
-
JENKINS-12310 Dangling socket connections to jenkins after using cli jar?
-
- Open
-
-
JENKINS-15657 Getting "failed to connect" when using latest Jenkins CLI
-
- Open
-
-
JENKINS-16126 CLI Basic authentiation does not work
-
- Open
-
-
JENKINS-20333 using jenkins-cli.jar to set the next build number at the end of a job is hanging
-
- Open
-
-
JENKINS-20667 cli over internet doesn't work
-
- Open
-
-
JENKINS-20709 CLI client hangs
-
- Open
-
-
JENKINS-22177 Crash in Jenkins CLI when updating build result
-
- Open
-
-
JENKINS-16531 jenkins-cli with apache+ssl fails with 403
-
- Open
-
-
JENKINS-18301 Passphrase not prompted for default key files
-
- Open
-
-
JENKINS-31194 org.apache.sshd.common.SshException: Already closed
-
- Open
-
-
JENKINS-38623 Jenkins 2 cli failes with "java.io.IOException: Unexpected termination of the channel"
-
- Open
-
-
JENKINS-40056 CLI fails when JNLP port disabled
-
- Resolved
-
-
JENKINS-22346 CLI commands with private key for nonexistent user fail with EOFException from DataInputStream.readBoolean
-
- Resolved
-
-
JENKINS-22472 CommandDuringBuild not automatically authenticated
-
- Resolved
-
-
JENKINS-12543 CliAuthenticator (username/password) called too late to parse arguments (like job names)
-
- Resolved
-
-
JENKINS-27026 Log/notify SSH CLI authentication
-
- Resolved
-
-
JENKINS-32488 Misleading message reported by the Help Command when permission is denied.
-
- Open
-
-
JENKINS-33595 Disable SSHD by default on new Installations
-
- Resolved
-
-
JENKINS-49205 Permit file transfers under non-Remoting-based CLI
-
- Resolved
-
- links to
Activity
Field | Original Value | New Value |
---|---|---|
Epic Link |
|
Link | This issue is related to JENKINS-26463 [ JENKINS-26463 ] |
Assignee | Jesse Glick [ jglick ] |
Link |
This issue relates to |
Status | Open [ 1 ] | In Progress [ 3 ] |
Link | This issue relates to SECURITY-463 [ SECURITY-463 ] |
Link | This issue relates to JENKINS-22177 [ JENKINS-22177 ] |
Link |
This issue relates to |
Link |
This issue relates to |
Link | This issue relates to JENKINS-20333 [ JENKINS-20333 ] |
Link |
This issue relates to |
Link | This issue relates to JENKINS-38623 [ JENKINS-38623 ] |
Link | This issue relates to JENKINS-7052 [ JENKINS-7052 ] |
Link | This issue relates to JENKINS-20709 [ JENKINS-20709 ] |
Link | This issue relates to JENKINS-15657 [ JENKINS-15657 ] |
Link | This issue relates to JENKINS-11560 [ JENKINS-11560 ] |
Link | This issue relates to JENKINS-12310 [ JENKINS-12310 ] |
Link | This issue relates to JENKINS-32488 [ JENKINS-32488 ] |
Link | This issue relates to JENKINS-16126 [ JENKINS-16126 ] |
Link | This issue relates to JENKINS-18301 [ JENKINS-18301 ] |
Link | This issue relates to JENKINS-16531 [ JENKINS-16531 ] |
Link | This issue relates to JENKINS-20667 [ JENKINS-20667 ] |
Link | This issue relates to JENKINS-31194 [ JENKINS-31194 ] |
Remote Link | This issue links to "PR 2795 (Web Link)" [ 15659 ] |
Link |
This issue depends on |
Link |
This issue relates to |
Labels | security |
Link | This issue relates to SECURITY-466 [ SECURITY-466 ] |
Remote Link | This issue links to "sshd-module PR 10 (Web Link)" [ 15712 ] |
Description |
Followup to the November 2016 security fix. We need ideas for making the CLI less (not?) vulnerable to that kind of exploit. https://groups.google.com/d/msg/jenkinsci-dev/ijnIr8LhBG0/tM4Jc39cDgAJ (public) https://groups.google.com/d/msg/jenkinsci-cert/3dnPu7x88a8/7JwwMKj7BgAJ (Jenkins CERT private) |
Followup to the November 2016 security fix. We need ideas for making the CLI less (not?) vulnerable to that kind of exploit. [https://groups.google.com/d/msg/jenkinsci-dev/ijnIr8LhBG0/tM4Jc39cDgAJ] |
Remote Link | This issue links to "Formal proposal (Web Link)" [ 15719 ] |
Description |
Followup to the November 2016 security fix. We need ideas for making the CLI less (not?) vulnerable to that kind of exploit. [https://groups.google.com/d/msg/jenkinsci-dev/ijnIr8LhBG0/tM4Jc39cDgAJ] |
[Proposal|https://gist.github.com/jglick/9721427da892a9b2f75dc5bc09f8e6b3] |
Link |
This issue relates to |
Remote Link | This issue links to "support-core PR 110 (Web Link)" [ 15901 ] |
Remote Link | This issue links to "sshd-module PR 11 (Web Link)" [ 15902 ] |
Remote Link | This issue links to "jenkins.io PR 802 (Web Link)" [ 15903 ] |
Remote Link | This issue links to "SECURITY-218 page PR 8 (Web Link)" [ 15904 ] |
Status | In Progress [ 3 ] | In Review [ 10005 ] |
Resolution | Fixed [ 1 ] | |
Status | In Review [ 10005 ] | Resolved [ 5 ] |
Link |
This issue is blocked by |
Link | This issue is blocked by JENKINS-43517 [ JENKINS-43517 ] |
Link |
This issue is blocked by |
Link |
This issue is blocked by |
Link |
This issue relates to |
First experiments in https://github.com/daniel-beck/jenkins-ssh-cli to see whether a pure SSH CLI could work.