JetBrains plugs security vulns, fixes dozens of bugs in TeamCity 2019.2.2

JetBrains plugs security vulns, fixes dozens of bugs in TeamCity 2019.2.2

JetBrains has blasted out TeamCity 2019.2.2, which amongst other things includes a brace of security fixes significant enough for the vendor to “strongly recommend” customers upgrade quickly.

The vendor is not disclosing the nature of the security fixes to the CI/CD server for now, but has detailed over 60 issues overall that are fixed in the latest version, as well as a trio of new features. The latter includes the ability to add multiple Docker accounts to Teamcity’s Docker Support feature.

The second new feature is the ability to distinguish between regular and project agent pools in the `/app/rest/ui/agentPools’, and the third comes in the shape of refreshing the UI when a build problem investigation is updated.

A trio of usability issues are also addressed, including the provision of a compact presentation for a build configuration based on multiple templates in the Clean-up settings page. Also, names are no longer shortened if there is space on the right. Lastly, it has fixed an issue which meant information about build results was not updated automatically after finishing the build.

The fleet of bugs addressed includes a number of UI related problems, such as one which meant no error was displayed in the UI on error retrieving branches for drop-down, or the “show all build problems”-button on the built page showing…well, nothing at all.

There are over 20 performance fixes, including addressing TeamCity running “very slow” after upgrading to 2019.2.1. A number of database related fixes include extending DB layer to support limit like queries for Oracle and MS SQL, and one for an issue where servers “with many cores can stall with “Database connections pool exhausted” when the disk becomes slow due to many threads writing load.”