[
https://issues.jboss.org/browse/JBDS-3314?page=com.atlassian.jira.plugin....
]
Mickael Istria commented on JBDS-3314:
--------------------------------------
We are including Luna SR1a, which is exactly the same as Luna SR1, except for the EGit and
JGit part.
Their version is 3.4.2.201412180340-r
Include JGit security patch
---------------------------
Key: JBDS-3314
URL:
https://issues.jboss.org/browse/JBDS-3314
Project: Developer Studio (JBoss Developer Studio)
Issue Type: Bug
Components: build, target-platform
Affects Versions: 8.0.1.GA
Reporter: Mickael Istria
Assignee: Mickael Istria
Priority: Critical
Fix For: 8.0.2.GA
A vulnerability was announced in most Git clients (including JGit).
JGit has provided a new version that fixes this vulnerability, and this has been included
in a rebuild of Luna SR1. We should include it.
https://mmilinkov.wordpress.com/2015/01/12/eclipse-ships-luna-sr1a-git-se...
--
This message was sent by Atlassian JIRA
(v6.3.11#6341)