<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi,<br>
<br>
Some of you may be aware that a vulnerability was found in most Git
clients (including JGit):
<a class="moz-txt-link-freetext" href="https://bugs.eclipse.org/bugs/show_bug.cgi?id=456947">https://bugs.eclipse.org/bugs/show_bug.cgi?id=456947</a><br>
In order to not propagate this vulnerability, we've updated the
target platform 4.41.2.CR1-SNAPSHOT to ship a fixed version of
EGit/JGit.<br>
<br>
Parent pom 4.2.2-SNAPSHOT will be updated to consume the modified
4.41.2.CR1-SNAPSHOT target-platform.<br>
Jobs for jbosstools-4.2.x branch will be updated to consume and ship
the modified 4.41.2.CR1-SNAPSHOT target-platform.<br>
<br>
Then, when we have made the necessary test to validate that our
change has the expected effect on JBoss Tools and JBoss Developer
Studio, we'll release this 4.41.2.CR1-SNAPSHOT target-platform as a
4.41.2.Final, re-update parent pom and jobs, and we'll be able to
proceed with staging of JBT 4.2.2/JBDS 8.0.2.<br>
<br>
Cheers,<br>
<div class="moz-signature">-- <br>
Mickael Istria<br>
Eclipse developer at <a href="http://www.jboss.org/tools">JBoss,
by Red Hat</a><br>
<a href="http://mickaelistria.wordpress.com">My blog</a> - <a
href="http://twitter.com/mickaelistria">My Tweets</a></div>
</body>
</html>