[jbosstools-issues] [JBoss JIRA] (JBIDE-21119) Update 4.5y.x TP to m2e 1.6.x (with fix for apache commons collections 3.2.2 / COLLECTIONS-580 / JBDS-3560)

[Nick Boldt (JIRA)]

     [ https://issues.jboss.org/browse/JBIDE-21119?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Nick Boldt updated JBIDE-21119:
-------------------------------
    Affects Version/s: 4.3.0.Final


> Update 4.5y.x TP to m2e 1.6.x (with fix for apache commons collections 3.2.2 / COLLECTIONS-580 / JBDS-3560)
> -----------------------------------------------------------------------------------------------------------
>
>                 Key: JBIDE-21119
>                 URL: https://issues.jboss.org/browse/JBIDE-21119
>             Project: Tools (JBoss Tools)
>          Issue Type: Bug
>          Components: maven, target-platform, upstream
>    Affects Versions: 4.3.0.Final
>            Reporter: Nick Boldt
>            Assignee: Fred Bricon
>             Fix For: 4.3.1.Beta1
>
>
> Fred said: {quote}So the m2e archetype feature also embeds a version of vulnerable commons-collections, that we need to fix upstream (even though it's not really vulnerable, just makes people cringy) -- JBDS-3560
> {quote}
> So, we need a new version of m2e 1.6.x (with fix for apache commons collections 3.2.2 / COLLECTIONS-580 / JBDS-3560) and we can then mirror it and update the 4.50.x and 4.51.x TPs (for JBDS 9.1, not 9.0.1).



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)