[jbosstools-issues] [JBoss JIRA] (JBDS-3314) Include JGit security patch

[Mickael Istria (JIRA)]

    [ https://issues.jboss.org/browse/JBDS-3314?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13032643#comment-13032643 ] 

Mickael Istria commented on JBDS-3314:
--------------------------------------

We are including Luna SR1a, which is exactly the same as Luna SR1, except for the EGit and JGit part.
Their version is 3.4.2.201412180340-r

> Include JGit security patch
> ---------------------------
>
>                 Key: JBDS-3314
>                 URL: https://issues.jboss.org/browse/JBDS-3314
>             Project: Developer Studio (JBoss Developer Studio)
>          Issue Type: Bug
>          Components: build, target-platform
>    Affects Versions: 8.0.1.GA
>            Reporter: Mickael Istria
>            Assignee: Mickael Istria
>            Priority: Critical
>             Fix For: 8.0.2.GA
>
>
> A vulnerability was announced in most Git clients (including JGit).
> JGit has provided a new version that fixes this vulnerability, and this has been included in a rebuild of Luna SR1. We should include it.
> https://mmilinkov.wordpress.com/2015/01/12/eclipse-ships-luna-sr1a-git-security-release/



--
This message was sent by Atlassian JIRA
(v6.3.11#6341)