-
Bug
-
Resolution: Fixed
-
Major
JENKINS-42577/ https://github.com/jenkinsci/jenkins/pull/3010 added saving of the Jenkins version whenever Jenkins is saved.
This caused the security issue JENKINS-47139, fixed by https://github.com/jenkinsci/jenkins/pull/3050
While that resolved the security issue that skips the wizard and its default protections, the setup wizard is still broken in a more subtle form:
In Jenkins 2.79, when restarting Jenkins while the setup wizard was unfinished, it would resume the setup wizard.
In Jenkins 2.81, when restarting Jenkins while the setup wizard was unfinished, it does not resume the setup wizard. While it still set the security defaults, and users can log in using 'admin' and the setup unlock code, it may not be clear to users that this works, and they just have a locked instance.
- links to