Hello all,
The gerrit server on review.trustedfirmware.org will be offline for a 2
hour maintenance window starting today (Oct 4, 2023) at 19:00 UTC.
This downtime is needed in order to upgrade gerrit to the current version
(3.8.1).
Changelog is available at:
--
Kelley Spoon <kelley.spoon(a)linaro.org>
Hello All,
The jenkins server will stop processing jobs on 2023-10-03 at around
21:00 UTC, as the server will be put into "Shutdown mode".
This downtime is needed in order to upgrade Jenkins to address some minor
security vulnerabilities and upgrade internal dependencies off of obsolete
versions.
Start: 2023-10-03 21:00 UTC
Finish: 2023-10-03 23:00 UTC
--
Kelley Spoon <kelley.spoon(a)linaro.org>
Hello All,
A recent CVE was published for the BlueOcean plugin being vulnerable to a
low effort CSRF attack that could disclose github credentials[1]
I have redeployed all Jenkins servers with an updated docker images that
contains a fixed version of BlueOcean.
The changes were minimal and should not be disruptive, but please let me
know if you experience any problems.
[1] https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3116
Regards,
--
Kelley Spoon <kelley.spoon(a)linaro.org>
