merged back the RC branch

changelog.html

@@ -61,8 +61,14 @@ Upcoming changes</a>
 
 <!-- these changes are controlled by the release process. DO NOT MODIFY -->
 <div id="rc" style="display:none;"><!--=BEGIN=-->
-<h3><a name=v1.438>What's new in 1.438</a> <!--=DATE=--></h3>
+<h3><a name=v1.439>What's new in 1.439</a> <!--=DATE=--></h3>
+<!--=RC-CHANGES=-->
+</div><!--=END=-->
+<h3><a name=v1.438>What's new in 1.438</a> (2011/11/07)</h3>
 <ul class=image>
+  <li class='major bug'>
+    Thanks to Luca De Fulgentis, fixed XSS vulnerability with the built-in servlet container.
+    (SECURITY-17)
   <li class=bug>
     Fixed random OutOfMemoryError with console annotations
   (<a href="https://issues.jenkins-ci.org/browse/JENKINS-9349">issue 9349</a>)
@@ -85,7 +91,6 @@ Upcoming changes</a>
     Rewrote the JDK installer to remove problematic HtmlUnit dependencies.
     (<a href="https://issues.jenkins-ci.org/browse/JENKINS-11420">issue 11420</a>)
 </ul>
-</div><!--=END=-->
 <h3><a name=v1.437>What's new in 1.437</a> (2011/10/31)</h3>
 <ul class=image>
   <li class=rfe>

debian/debian/changelog

+jenkins (1.438) unstable; urgency=low
+
+  * See http://jenkins-ci.org/changelog for more details.
+
+ -- Kohsuke Kawaguchi <kk@kohsuke.org>  Mon, 07 Nov 2011 13:46:28 -0800
+
 jenkins (1.437) unstable; urgency=low
 
   * See http://jenkins-ci.org/changelog for more details.

war/pom.xml

@@ -99,7 +99,7 @@ THE SOFTWARE.
       -->
       <groupId>org.jenkins-ci</groupId>
       <artifactId>winstone</artifactId>
-      <version>0.9.10-jenkins-28</version>
+      <version>0.9.10-jenkins-29</version>
       <scope>test</scope>
     </dependency>
     <dependency>