[jbosstools-issues] [JBoss JIRA] (JBDS-3314) Include JGit security patch

Max Rydahl Andersen (JIRA) issues at jboss.org
Wed Jan 14 10:54:51 EST 2015


    [ https://issues.jboss.org/browse/JBDS-3314?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13032510#comment-13032510 ] 

Max Rydahl Andersen commented on JBDS-3314:
-------------------------------------------

For QE: test to ensure that using updatesite that has JBDS 8.0.2 / Tools 4.2.2 but only have 8.0.0/4.2.0 installed the users will get the jgit plugin.  

> Include JGit security patch
> ---------------------------
>
>                 Key: JBDS-3314
>                 URL: https://issues.jboss.org/browse/JBDS-3314
>             Project: Developer Studio (JBoss Developer Studio)
>          Issue Type: Bug
>          Components: build, target-platform
>    Affects Versions: 8.0.1.GA
>            Reporter: Mickael Istria
>            Assignee: Mickael Istria
>            Priority: Critical
>             Fix For: 8.0.2.GA
>
>
> A vulnerability was announced in most Git clients (including JGit).
> JGit has provided a new version that fixes this vulnerability, and this has been included in a rebuild of Luna SR1. We should include it.
> https://mmilinkov.wordpress.com/2015/01/12/eclipse-ships-luna-sr1a-git-security-release/



--
This message was sent by Atlassian JIRA
(v6.3.11#6341)


More information about the jbosstools-issues mailing list