[JIRA] (JENKINS-52637) Warning message for Environment Injector plugin and Jenkins core

24 views
Skip to first unread message

shen3lu4@gmail.com (JIRA)

unread,
Jul 18, 2018, 1:18:01 PM7/18/18
to jenkinsc...@googlegroups.com
Lu Shen created an issue
 
Jenkins / Bug JENKINS-52637
Warning message for Environment Injector plugin and Jenkins core
Issue Type: Bug Bug
Assignee: Unassigned
Components: core, envinject-plugin
Created: 2018-07-18 17:17
Environment: jenkins 2.121.2
Environment Injector Plugin 2.1.6
Priority: Minor Minor
Reporter: Lu Shen

On Manage Jenkins page, I see the following warning message:

Warnings have been published for the following currently installed components.

Environment Injector Plugin 2.1.6

Exposure of sensitive build variables stored by EnvInject 1.90 and earlier

however my environment injector plugin is already 2.1.6.

 

Also in Jenkins log, there is a warning:

WARNING: Attempt to (de-)serialize anonymous class hudson.FilePath$27 in file:/var/cache/jenkins/war/WEB-INF/lib/jenkins-core-2.121.2.jar; see: https://jenkins.io/redirect/serialization-of-anonymous-classes/

Anyway to get rid of this?

Add Comment Add Comment
 
This message was sent by Atlassian JIRA (v7.10.1#710002-sha1:6efc396)

dbeck@cloudbees.com (JIRA)

unread,
Jul 18, 2018, 6:54:02 PM7/18/18
to jenkinsc...@googlegroups.com
Daniel Beck closed an issue as Not A Defect
 

The warning is being published for all releases of envinject due to the nature of the problem (we only published it years after it was fixed, but old stored data can still be around).

Hence, closing as not a defect.

The other is not a bug. We're cleaning up and anything older than the latest weekly may still have some old callables around that have since been fixed without backport.

Change By: Daniel Beck
Status: Open Closed
Resolution: Not A Defect
Reply all
Reply to author
Forward
0 new messages