Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-50633

JEP-200 - org.apache.maven.model.Model might be dangerous, so rejecting

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major Major
    • Jenkins 2.114, Maven Integration plugin 3.1.2, Pipeline Utility Steps 2.0.2

      Errors after update to latest Jenkins version:

      WARNING: org.apache.maven.model.Model in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.apache.maven.model.DistributionManagement in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.apache.maven.model.Dependency in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.apache.maven.model.Build in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.apache.maven.model.DeploymentRepository in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.apache.maven.model.Plugin in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.apache.maven.model.PluginExecution in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.apache.maven.model.Exclusion in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.apache.maven.model.Parent in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.codehaus.plexus.util.xml.Xpp3Dom in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/plexus-utils-3.0.24.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.apache.maven.model.Resource in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      
      WARNING: org.apache.maven.model.Model in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.apache.maven.model.DistributionManagement in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.apache.maven.model.Plugin in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.apache.maven.model.Exclusion in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.apache.maven.model.Parent in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      WARNING: org.apache.maven.model.PluginExecution in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
      

          [JENKINS-50633] JEP-200 - org.apache.maven.model.Model might be dangerous, so rejecting

          Test User created issue -
          Test User made changes -
          Description Original: Errors after update to latest Jenkins version:

          {noformat}
          WARNING: org.apache.maven.model.Model in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.DistributionManagement in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Dependency in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Build in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.DeploymentRepository in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Plugin in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.PluginExecution in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          {noformat}
          New: Errors after update to latest Jenkins version:

          {noformat}
          WARNING: org.apache.maven.model.Model in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.DistributionManagement in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Dependency in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Build in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.DeploymentRepository in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Plugin in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.PluginExecution in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          {noformat}

          {noformat}
          WARNING: org.apache.maven.model.Model in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.DistributionManagement in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Plugin in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          {noformat}
          Test User made changes -
          Environment Original: Jenkins 2.114, Maven Integration plugin 3.1.2 New: Jenkins 2.114, Maven Integration plugin 3.1.2, Pipeline Utility Steps 2.0.2
          Test User made changes -
          Component/s New: pipeline-utility-steps-plugin [ 21135 ]
          Test User made changes -
          Description Original: Errors after update to latest Jenkins version:

          {noformat}
          WARNING: org.apache.maven.model.Model in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.DistributionManagement in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Dependency in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Build in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.DeploymentRepository in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Plugin in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.PluginExecution in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          {noformat}

          {noformat}
          WARNING: org.apache.maven.model.Model in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.DistributionManagement in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Plugin in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          {noformat}
          New: Errors after update to latest Jenkins version:

          {noformat}
          WARNING: org.apache.maven.model.Model in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.DistributionManagement in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Dependency in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Build in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.DeploymentRepository in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Plugin in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.PluginExecution in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Exclusion in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Parent in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.codehaus.plexus.util.xml.Xpp3Dom in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/plexus-utils-3.0.24.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Resource in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          {noformat}

          {noformat}
          WARNING: org.apache.maven.model.Model in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.DistributionManagement in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Plugin in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Exclusion in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.Parent in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          WARNING: org.apache.maven.model.PluginExecution in file:/var/lib/jenkins/plugins/pipeline-utility-steps/WEB-INF/lib/maven-model-3.3.9.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          {noformat}

          Oleg Nenashev added a comment -

          testuser7 Could you please provide a list of plugins you use + Full stacktraces?
          I would like to track down the plugins using these classes

          Oleg Nenashev added a comment - testuser7 Could you please provide a list of plugins you use + Full stacktraces? I would like to track down the plugins using these classes
          Oleg Nenashev made changes -
          Link New: This issue relates to JENKINS-50632 [ JENKINS-50632 ]
          Test User made changes -
          Attachment New: plugins-list.txt [ 42100 ]

          Test User added a comment - - edited

          Plugins list: plugins-list.txt

          There is no any stack trace. Full log:

          Apr 05, 2018 5:14:33 PM jenkins.security.ClassFilterImpl lambda$isBlacklisted$1
          WARNING: org.apache.maven.model.Model in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/
          

          I'm not using maven-plugin for now.
          Step readMavenPom from pipeline-utility-steps is used.

          Test User added a comment - - edited Plugins list: plugins-list.txt There is no any stack trace. Full log: Apr 05, 2018 5:14:33 PM jenkins.security.ClassFilterImpl lambda$isBlacklisted$1 WARNING: org.apache.maven.model.Model in file:/var/lib/jenkins/plugins/maven-plugin/WEB-INF/lib/maven-model-3.1.0.jar might be dangerous, so rejecting; see https://jenkins.io/redirect/class-filter/ I'm not using maven-plugin for now. Step readMavenPom from pipeline-utility-steps is used.
          Oleg Nenashev made changes -
          Component/s Original: maven-plugin [ 16033 ]

            oleg_nenashev Oleg Nenashev
            testuser7 Test User
            Votes:
            1 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: