<div dir="ltr">Hi, <div><br></div><div>So the SP tags are not created in the open-source repositories as a rule? (and of course neither are binaries published in maven)?<br><br>Are you implying that RH is not releasing "SP" fixes in 2.0.X as open-source in the normal repos?</div><div><br></div><div>If that is the case, I'd like to understand fully what is the policy for releasing bug-fixes, security fixes and such. Is there any document that explains such policy? I have built stuff that right now depends on 2.0.X, as many others I guess, based in (wrong?) assumptions about the open-ness of this project. </div><div><br></div><div>br,<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">Francisco A. Lozano</div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">El lun., 27 abr. 2020 a las 17:49, Flavia Rainone (<<a href="mailto:frainone@redhat.com">frainone@redhat.com</a>>) escribió:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi Francisco<div><br></div><div>The SP tags are done in Red Hat internal product repositories.</div><div><br></div><div>The <a href="http://2.1.0.Final?" target="_blank">2.1.0.Final?</a> is uploaded to the github.repo.</div><div><br></div><div>Regards,</div><div>Flavia</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Apr 22, 2020 at 9:59 AM Francisco A. Lozano <<a href="mailto:flozano@gmail.com" target="_blank">flozano@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi,<div>With regard to <a href="https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1757" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1757</a>:</div><div><br></div><div>- I can't find 2.0.30.sp1 and 2.1.0 final tags in <a href="https://github.com/undertow-io/undertow" target="_blank">https://github.com/undertow-io/undertow</a> . </div><div>- In binary form, I can find <a href="http://2.1.0.Final?" target="_blank">2.1.0.Final?</a> in maven central repository, but 2.0.30.sp1 is not available there either.<br></div><div><br></div><div><div><div dir="ltr">Francisco A. Lozano</div></div></div></div>
_______________________________________________<br>
undertow-dev mailing list<br>
<a href="mailto:undertow-dev@lists.jboss.org" target="_blank">undertow-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/undertow-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/undertow-dev</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>
<p style="font-weight:bold;margin:0px;padding:0px;font-size:14px;font-family:RedHatText,sans-serif">
<span>Flavia</span> <span>Rainone</span><span style="color:rgb(170,170,170);margin:0px"></span>
</p>
<p style="font-size:12px;margin:0px;font-family:RedHatText,sans-serif">
<span>Principal Software Engineer</span>
</p>
<p style="margin:0px 0px 4px;font-size:12px;font-family:RedHatText,sans-serif">
<a style="color:rgb(0,136,206);margin:0px" href="https://www.redhat.com" target="_blank">Red Hat </a>
</p>
<div style="margin-bottom:4px">
</div>
<p style="margin:0px;font-size:12px;font-family:RedHatText,sans-serif">
<span style="margin:0px;padding:0px"><a style="color:rgb(0,0,0);margin:0px" href="mailto:frainone@redhat.com" target="_blank">frainone@redhat.com</a> </span>
</p>
<div style="margin-top:12px">
<table border="0">
<tbody><tr>
<td width="100px"><a href="https://www.redhat.com" target="_blank"> <img src="https://static.redhat.com/libs/redhat/brand-assets/2/corp/logo--200.png" width="90" height="auto"></a> </td>
</tr>
</tbody></table>
</div></div></div></div></div></div></div></div>
</blockquote></div>