Fixes the security issues described in the advisory.
Robustness: Don't break queue processing when the configured queue sorter throws exceptions.
Whitelist java.time.Ser for use in XStream (XML serialization) and Remoting (agent communication)
hudson.FilePath#copyFromRemotely(URL) Beta API.
Fix a potential deadlock between queue maintenance and asynchronous execution.
Security hardening: Prevent files in
tar archives from being written to a path outside the destination directory.
Dynamically loaded plugins now have any
PeriodicWork/AperiodicWork extensions scheduled.