[aerogear-dev] [Cordova] Important security fixes for Cordova-Android just released

Bruno Oliveira bruno at abstractj.org
Tue Aug 5 07:25:35 EDT 2014


On 2014-08-05, Erik Jan de Wit wrote:
> We had this discussion before and I still feel that this course of action is wrong. It’s like let’s update the java library that we created when there is a security error in java.

That **must** be the correct approach, most part of the time the cause
of people exploiting security vulnerabilities is because the software is
outdated. Do you want to engage our developers to ignore it?

>
> All people have to do is to use the newer version of the android platform (if they are currently using 3.5.0)
>
> cordova platform add android at 3.5.1

I still disagree on that, we must lead by example and encourage them to
update their versions.

>
>
> On 5 Aug,2014, at 10:04 , Karel Piwko <kpiwko at redhat.com> wrote:
>
> > +1 for updating.
> >
> > On Tue, Aug 5, 2014 at 8:45 AM, Matthias Wessendorf <matzew at apache.org>
> > wrote:
> >> FYI
> >>
> >> https://twitter.com/apachecordova/status/496418463666028545
> >>
> >> Wondering, should we update the plugin ?
> >>
> >> --
> >> Matthias Wessendorf
> >>
> >> blog: http://matthiaswessendorf.wordpress.com/
> >> sessions: http://www.slideshare.net/mwessendorf
> >> twitter: http://twitter.com/mwessendorf
> >
> > _______________________________________________
> > aerogear-dev mailing list
> > aerogear-dev at lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/aerogear-dev
>

> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev


--

abstractj
PGP: 0x84DC9914


More information about the aerogear-dev mailing list