This is a guest post by Craig Rodrigues The FreeBSD project produces a modern operating system derived from BSD Unix. In the past 6 months, we have set up Jenkins at https://jenkins.freebsd.org/, to continuously build FreeBSD as developers add new code to the project. This has helped us identify and fix build breaks very quickly. We have gone even farther by integrating Jenkins, Kyua, and Bhyve. Kyua is a...

+ https://en.wikipedia.org/wiki/Poodle[image:https://upload.wikimedia.org/wikipedia/commons/thumb/0/02/Freddie_%288467901543%29.jpg/160px-Freddie_%288467901543%29.jpg[image]] + + + + Another day, another SSL vulnerability! Google has https://poodle.io/[announced a vulnerability in SSL v3], and if you are using the "Winstone" servlet container built into Jenkins, and if you are using the HTTPS connector with the `+--httpsPort+` option (it is off by default), then you are vulnerable to this problem. + + + I've just issued link:/security/advisory/2014-10-15/[a security advisory] on this. If you haven't...

(This is a guest post from Daniel Spilker) Jenkins supports building plugins using Gradle for a while now. Last week a new version of the Gradle JPI plugin has been released to iron out some issues. The Gradle JPI plugin enables a 100% groovy plugin development environment with Groovy as primary programming language, Spock for writing tests and Gradle as build system. Have a look at...

+ https://en.wikipedia.org/wiki/Road_signs_in_Singapore[ + image:https://upload.wikimedia.org/wikipedia/commons/thumb/f/f7/Singapore_Road_Signs_-_Restrictive_Sign_-_Stop_-_Security_Check.svg/240px-Singapore_Road_Signs_-_Restrictive_Sign_-_Stop_-_Security_Check.svg.png[image] + ] + + + I suspect many of you have been impacted by https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6271[CVE-2014-6271] (aka "shellshock" bash vulnerability.) We had our share of updates to do for various *.jenkins-ci.org servers. + + + Java application servers in general (including one that ships in Jenkins) do not fork off processes like Apache does to serve requests, so the kind of CGI attacks you see on Apache does...

+ + + + The usual suspects, such as CloudBees, XebiaLabs, SOASTA, PuppetLabs, et al are https://www.cloudbees.com/cdsummit/[doing a Jenkins-themed continuous delivery event series] called "cdSummit." The event is free, has a nice mix of user/vendor talks, and has an appeal to managers and team leads who are working on and struggling with continuous delivery and automation. + + + I've spoken in the past events, and I enjoyed...

+ image:https://jenkins-ci.org/sites/default/files/images/JavaOne.png[image] + + + + There'll be several talks that touch Jenkins. The first is from me and Jesse called https://oracleus.activeevents.com/2014/connect/sessionDetail.ww?SESSION_ID=3387[Next Step in Automation: Elastic Build Environment [CON3387]] Monday 12:30pm. + + + Then later Tuesday, there's https://oracleus.activeevents.com/2014/connect/sessionDetail.ww?SESSION_ID=11237[Building a Continuous Delivery Pipeline with Gradle and Jenkins [CON11237]] from Benjamin Muschko of Gradleware. + + + Thursday has several Jenkins talks. One is https://oracleus.activeevents.com/2014/connect/sessionDetail.ww?SESSION_ID=1880[The Deploy Factory: Open Source Tools for...

+ https://groups.google.com/forum/#!msg/jenkinsci-dev/qY387kOQlW8/vaBxacXYhGwJ[As was discussed some time ago], the workflow summit is being organized, and it's open for RSVP. + + + Due to the overwhelming demand, I've increased the capacity this time to 50, but this is an unconference where everyone needs to participate, which means we really cannot have too many people without changing the dynamics of the event. + + + So please make sure...

+ + + + My apologies for the last minute announcement, but there will be a https://www.meetup.com/jenkinsmeetup/events/203261692/[Jenkins user meet-up in Paris on Sep 10th 7:00pm], which is just next week. The event is hosted by Zenika. You'll hear from https://twitter.com/gboissinot[Gregory Boissinot] and https://twitter.com/alecharp[Adrien Lecharpentier] about plugin development, and I'll be talking about workflow. + + + It's been a while we do a meet-up in Paris. Looking forward...