Merge pull request #169 from dheid/master

JENKINS-43637 Removed blacklisting from PostBuildScript plugin
jenkins-infra · Nov 17, 2017 · 63abf23 · 63abf23
2 parents bf2b908 + b8a2b1a
commit 63abf23
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/src/main/resources/artifact-ignores.properties b/src/main/resources/artifact-ignores.properties
@@ -204,7 +204,6 @@ cvs-tag                       # SECURITY-459
 dynamicparameter              # SECURITY-462
 grails                        # SECURITY-458
 groovyaxis                    # SECURITY-460
-postbuildscript               # SECURITY-295
 proc-cleaner-plugin           # SECURITY-489
 reactor-plugin                # SECURITY-487
 script-scm                    # SECURITY-461

diff --git a/src/main/resources/warnings.json b/src/main/resources/warnings.json
@@ -364,9 +364,10 @@
     "message": "Arbitrary code execution vulnerability",
     "url": "https://jenkins.io/security/advisory/2017-04-10/",
     "versions": [
-      {
-        "pattern": ".*"
-      }
+		{
+			"lastVersion": "0.17",
+			"pattern": "0[.]([0-9]|1[0-7])"
+		}
     ]
   },
   {