Branch: refs/heads/master
Home: https://github.com/jenkinsci/script-security-plugin
Commit: d738f61ef817b909669280304dec2c534559f0a1
https://github.com/jenkinsci/script-security-plugin/commit/d738f61ef817b909669280304dec2c534559f0a1
Author: Wadeck Follonier <[email protected]>
Date: 2018-01-09 (Tue, 09 Jan 2018)
Changed paths:
M
src/main/resources/org/jenkinsci/plugins/scriptsecurity/sandbox/whitelists/blacklist
Log Message:
-----------
[SECURITY-683] Prevent Spectre/Meltdown
- preventively blacklist System.nanoTime()
- currently the accuracy / precision of the system calls inside a sandbox is
very bad and so prevent naturally the attack.
Commit: cb1873a272002734b508a790ff23e5df04ce90af
https://github.com/jenkinsci/script-security-plugin/commit/cb1873a272002734b508a790ff23e5df04ce90af
Author: Wadeck Follonier <[email protected]>
Date: 2018-01-09 (Tue, 09 Jan 2018)
Changed paths:
M
src/main/resources/org/jenkinsci/plugins/scriptsecurity/sandbox/whitelists/blacklist
Log Message:
-----------
- update order of blacklist
Commit: 06fa0ea22dddfe1778061ce89e0b7355931ac9d5
https://github.com/jenkinsci/script-security-plugin/commit/06fa0ea22dddfe1778061ce89e0b7355931ac9d5
Author: Andrew Bayer <[email protected]>
Date: 2018-01-10 (Wed, 10 Jan 2018)
Changed paths:
M
src/main/resources/org/jenkinsci/plugins/scriptsecurity/sandbox/whitelists/blacklist
Log Message:
-----------
Merge pull request #175 from Wadeck/SECURITY-683_SPECTRE_MELTDOWN
[SECURITY-683] Preventively reduce Spectre/Meltdown risk
Compare:
https://github.com/jenkinsci/script-security-plugin/compare/28dee779379e...06fa0ea22ddd
--
You received this message because you are subscribed to the Google Groups
"Jenkins Commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
