[
https://issues.jboss.org/browse/JBDS-3562?page=com.atlassian.jira.plugin....
]
Max Rydahl Andersen commented on JBDS-3562:
-------------------------------------------
[~nickboldt] no, those statements do not state opposite things.
I'm stating that there are no known vulnerability to exploit in Eclipse that makes it
critical for us to release updated plugins.
That
Eclipse.org in jpa and m2e is preparing to have fixes into Mars.2 just to be on the
safe side is not in any way on its own an indication that Eclipse is vulnerable. And for
sure it means that we can't actually include their bits in the release - it will only
be in the actual installer, not for those installing jboss tools or devstudio from the
updatesite.
Thus why I ask why we are spending time on discussing updating of TP's etc. if the
only thing we for now know we need and can do is update the Installer ?
Prepare for 9.0.1 / 9.1.0
--------------------------
Key: JBDS-3562
URL:
https://issues.jboss.org/browse/JBDS-3562
Project: Developer Studio (JBoss Developer Studio)
Issue Type: Bug
Components: build
Affects Versions: 9.0.1.GA
Reporter: Nick Boldt
Assignee: Nick Boldt
Fix For: 9.0.1.GA
Tracker JIRA to house things to do to prepare for 9.0.1 / 9.1.0 branches & builds.
Because JBDS 9.0.0 includes the compromised version of
apache.commons.collections (JBDS-3560, JBDS-3561), we need to at some point respin it,
which
will include:
a) updated JBT/JBDS target platforms 4.50.1.* and 4.51.1.*
b) repin of JBDS update sites and installer jars
To that end, I've created the following new branches:
https://github.com/jbosstools/jbosstools-target-platforms/commits/4.50.1.x
https://github.com/jbosstools/jbosstools-target-platforms/commits/4.51.1.x
And I've bumped the version of the target platforms in the 4.50.x and
4.51.x branches to 4.50.2.Beta1-SNAPSHOT and 4.51.2.Beta1-SNAPSHOT,
respectively.
JBDS is now at version 9.1.0 in the 4.3.x branch and 9.0.1 in the
4.3.1.x branch.
https://github.com/jbdevstudio/jbdevstudio-product/commits/jbosstools-4.3...
(new, 9.0.1)
https://github.com/jbdevstudio/jbdevstudio-product/commits/jbosstools-4.3.x
(updated to 9.1.0)
So, now we just need to ensure that the correct BUILD_ALIAS (CR1 for
9.0.1, Beta1 for 9.1.0) and target platforms are used.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)