Branch: refs/heads/master
  Home:   https://github.com/jenkinsci/git-plugin
  Commit: a3d3a7eb7f75bfe97a0291e3b6d074aafafa86c9
      
https://github.com/jenkinsci/git-plugin/commit/a3d3a7eb7f75bfe97a0291e3b6d074aafafa86c9
  Author: Mark Waite <mark.earl.wa...@gmail.com>
  Date:   2018-02-18 (Sun, 18 Feb 2018)

  Changed paths:
    M pom.xml
    M src/main/java/hudson/plugins/git/GitStatus.java
    M src/test/java/hudson/plugins/git/GitStatusTest.java

  Log Message:
  -----------
  Fix SECURITY-723 - info disclosure over http

Prior to this change, the /git/search/ URL responded to queries for
user name information with the user names of system users which match
the query parameters, even if the query is not authenticated.

This removes the ability to search through the /git/search/ URL.  The
/git/search/ URL is an accident of implementation from the 2011
addition of the GitStatus object.


  Commit: 616dc818ed616349a4b716afb1c7e8c1ee8111d4
      
https://github.com/jenkinsci/git-plugin/commit/616dc818ed616349a4b716afb1c7e8c1ee8111d4
  Author: Mark Waite <mark.earl.wa...@gmail.com>
  Date:   2018-02-20 (Tue, 20 Feb 2018)

  Changed paths:
    M pom.xml

  Log Message:
  -----------
  [maven-release-plugin] prepare release git-3.8.0


  Commit: 4168359ec010ac51aa30788cd81765c466f428b9
      
https://github.com/jenkinsci/git-plugin/commit/4168359ec010ac51aa30788cd81765c466f428b9
  Author: Mark Waite <mark.earl.wa...@gmail.com>
  Date:   2018-02-20 (Tue, 20 Feb 2018)

  Changed paths:
    M pom.xml

  Log Message:
  -----------
  [maven-release-plugin] prepare for next development iteration


Compare: 
https://github.com/jenkinsci/git-plugin/compare/2656c35f3697...4168359ec010

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-commits+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to