Mon. Feb 17th, 2020

Jenkins 2.220 releases: Important security fixes

2 min read

Jenkins is a self-contained, open source automation server which can be used to automate all sorts of tasks related to building, testing, and delivering or deploying software. It is a server-based system that runs in servlet containers such as Apache Tomcat. It supports version control tools, including AccuRev, CVS, Subversion, Git, Mercurial, Perforce, ClearCase and RTC, and can execute Apache Ant, Apache Maven and sbt based projects as well as arbitrary shell scripts and Windows batch commands.

Jenkins can be installed through native system packages, Docker, or even run standalone by any machine with a Java Runtime Environment (JRE) installed. Built with Java, it provides over 1000 plugins to support automating virtually anything, so that humans can actually spend their time doing things machines cannot.


Changelog v2.220

  • Fix agent installation as a service on Windows (regression in 2.217). (Remoting 4.2 changelogAgent Installer Module 1.7 changelog)
  •  Fix NullPointerException when getting a list of runs with a status threshold (regression in 2.202). (issue 60884)
  •  Remove network discovery services (UDP and DNS). (issue 60913)
  •  Extends the current milestones so plugins can update jobs and configuration during Jenkins initialization. Adds initialization milestones: SYSTEM_CONFIG_LOADEDSYSTEM_CONFIG_ADAPTEDJOB_CONFIG_ADAPTED. (issue 51856)
  •  Export the plugin compatibility flag in Update Site REST API. (pull 4385)
  •  Suggest Jenkins Configuration as Code plugin in the installation wizard. (pull 4410)
  •  Do not record the user creating an agent in some circumstances. (issue 21837)
  •  Avoid logging node monitoring exceptions caused by node deletion. (issue 54496)
  •  Improve RSS feed titles. (issue 60848)
  •  Display build duration as tooltip to build date/time in the job’s build history (pull 4453)
  •  Improve performance of List Views when listing items (pull 4462)
  •  Improve performance of artifact archiving when using jenkins.model.StandardArtifactManager.disableTrafficCompression=true (issue 60907)
  •  Prevent creation of duplicated SetupWizard singleton instances on Jenkins startup. (issue 60867)
  •  Fix IndexOutOfBounds exception in ChoiceParameterDefinition.getDefaultParameterValue (issue 60721)
  •  Update Plugin manager pages to show icons while Jenkins is restarting (issue 59486)