[ https://issues.jboss.org/browse/TOOLSDOC-694?page=com.atlassian.jira.plug... ] Len DiMaggio edited comment on TOOLSDOC-694 at 12/9/15 10:36 AM: ----------------------------------------------------------------- The doc is misleading as it implies that an "update" can be performed when in reality, a new install of JBDS is needed. I think that the important text that we should include is: This Red Hat JBoss Developer Studio 9.0.0 Installer includes everything you need to install JBoss Developer Studio, as well as a copy of Red Hat JBoss Enterprise Application Platform 6.4.0. This patched version of Red Hat JBoss Enterprise Application Platform 6.4.0 includes this fix: BZ-1281963 - CVE-2015-7501 Apache commons-collections: InvokerTransformer code execution during deserialisation https://access.redhat.com/jbossnetwork/restricted/softwareDetail.html?sof... was (Author: ldimaggio): The doc is misleading as it implies that an "update" can be performed when in reality, a new install of JBDS is needed. I think that the important text that we should include is: This Red Hat JBoss Developer Studio 9.0.0 Installer includes everything you need to install JBoss Developer Studio, as well as a copy of Red Hat JBoss Enterprise Application Platform 6.4.0. This patched version of Red Hat JBoss Enterprise Application Platform 6.4.0 includes this fix: BZ-1281963 - CVE-2015-7501 Apache commons-collections: InvokerTransformer code execution during deserialisation -- This message was sent by Atlassian JIRA (v6.4.11#64026)