I'm not all that familiar with Jenkins source but what I did anyway was git
log between the 2.46.1 and 2.46.2 tags and scanned the commit messages for
anything that looked obvious, and it was just that:
commit ae402ba139df82f3d105b9e070444f1849543fce
Author: Daniel Beck <daniel-b...@users.noreply.github.com>
Date: Sat Apr 1 02:35:27 2017 +0200
[SECURITY-419] RequirePOST for creating a new node
This appears to be apart of
https://jenkins.io/security/advisory/2017-04-26/. So I'll need to get a bug
opened on nodepool.
Thanks!
On Friday, June 16, 2017 at 4:16:03 PM UTC-5, Baptiste Mathus wrote:
>
> You probably want to test 2.46.2, then start a git bisect to identify the
> commit that introduced this possibly.
>
> Cheers
>
> 2017-06-16 19:21 GMT+02:00 Matt Rabe <mrab...@gmail.com <javascript:>>:
>
>> Got an issue with Nodepool / Jenkins setup, we're trying to upgrade to
>> 2.46.3 but Nodepool fails with a 405 on the GET (it needs to be a POST)
>> request to add the Jenkins node. In 2.46.1 this GET request succeeds and
>> the node is added. I'm wondering what changed so I have something to point
>> to with Nodepool if a fix needs to go in there.
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Jenkins Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to jenkinsci-use...@googlegroups.com <javascript:>.
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/jenkinsci-users/e6f46619-e8cf-4529-b37d-12047082c81c%40googlegroups.com
>>
>> <https://groups.google.com/d/msgid/jenkinsci-users/e6f46619-e8cf-4529-b37d-12047082c81c%40googlegroups.com?utm_medium=email&utm_source=footer>
>> .
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>
--
You received this message because you are subscribed to the Google Groups
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to jenkinsci-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/jenkinsci-users/8fc15cd3-06d7-4ca1-8561-650a31e44e7e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
