[jbosstools-issues] [JBoss JIRA] (JBDS-3562) Prepare for 9.0.1 / 9.1.0

[Max Rydahl Andersen (JIRA)]

    [ https://issues.jboss.org/browse/JBDS-3562?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13133174#comment-13133174 ] 

Max Rydahl Andersen commented on JBDS-3562:
-------------------------------------------

[~nickboldt] no, those statements do not state opposite things.

I'm stating that there are no known vulnerability to exploit in Eclipse that makes it critical for us to release updated plugins.

That Eclipse.org in jpa and m2e is preparing to have fixes into Mars.2 just to be on the safe side is not in any way on its own an indication that Eclipse is vulnerable. And for sure it means that we can't actually include their bits in the release - it will only be in the actual installer, not for those installing jboss tools or devstudio from the updatesite.

Thus why I ask why we are spending time on discussing updating of TP's etc. if the only thing we for now know we need and can do is update the Installer ?
 

> Prepare for 9.0.1 / 9.1.0 
> --------------------------
>
>                 Key: JBDS-3562
>                 URL: https://issues.jboss.org/browse/JBDS-3562
>             Project: Developer Studio (JBoss Developer Studio)
>          Issue Type: Bug
>          Components: build
>    Affects Versions: 9.0.1.GA
>            Reporter: Nick Boldt
>            Assignee: Nick Boldt
>             Fix For: 9.0.1.GA
>
>
> Tracker JIRA to house things to do to prepare for 9.0.1 / 9.1.0 branches & builds.
> Because JBDS 9.0.0 includes the compromised version of
> apache.commons.collections (JBDS-3560, JBDS-3561), we need to at some point respin it, which
> will include:
> a) updated JBT/JBDS target platforms 4.50.1.* and 4.51.1.*
> b) repin of JBDS update sites and installer jars
> To that end, I've created the following new branches:
> https://github.com/jbosstools/jbosstools-target-platforms/commits/4.50.1.x
> https://github.com/jbosstools/jbosstools-target-platforms/commits/4.51.1.x
> And I've bumped the version of the target platforms in the 4.50.x and
> 4.51.x branches to 4.50.2.Beta1-SNAPSHOT and 4.51.2.Beta1-SNAPSHOT,
> respectively.
> JBDS is now at version 9.1.0 in the 4.3.x branch and 9.0.1 in the
> 4.3.1.x branch.
> https://github.com/jbdevstudio/jbdevstudio-product/commits/jbosstools-4.3.1.x
> (new, 9.0.1)
> https://github.com/jbdevstudio/jbdevstudio-product/commits/jbosstools-4.3.x
> (updated to 9.1.0)
> So, now we just need to ensure that the correct BUILD_ALIAS (CR1 for
> 9.0.1, Beta1 for 9.1.0) and target platforms are used.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)