[jbosstools-issues] [JBoss JIRA] (JBIDE-21119) Update 4.5y.x TP to m2e 1.6.x (with fix for apache commons collections 3.2.2 / COLLECTIONS-580 / JBDS-3560)

[Nick Boldt (JIRA)]

    [ https://issues.jboss.org/browse/JBIDE-21119?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13152797#comment-13152797 ] 

Nick Boldt edited comment on JBIDE-21119 at 1/25/16 1:24 AM:
-------------------------------------------------------------

What version of m2e will include this fix?

http://download.jboss.org/jbosstools/targetplatforms/jbosstoolstarget/4.50.2.Beta2-SNAPSHOT/REPO/plugins/ contains org.eclipse.m2e.core_1.6.1.20150625-2338.jar
http://download.jboss.org/jbosstools/targetplatforms/jbosstoolstarget/4.52.0.Beta2-SNAPSHOT/REPO/plugins/ contains org.eclipse.m2e.core_1.6.2.20150902-0002.jar





was (Author: nickboldt):
What version of m2e will include this fix?

http://download.jboss.org/jbosstools/targetplatforms/jbosstoolstarget/4.50.2.Beta2-SNAPSHOT/REPO/plugins/ contains org.eclipse.m2e.core_1.6.1.20150625-2338.jar
http://download.jboss.org/jbosstools/targetplatforms/jbosstoolstarget/4.52.0.Beta2-SNAPSHOT/REPO/plugins/ contains org.eclipse.m2e.core.ui_1.6.2.20150902-0002.jar




> Update 4.5y.x TP to m2e 1.6.x (with fix for apache commons collections 3.2.2 / COLLECTIONS-580 / JBDS-3560)
> -----------------------------------------------------------------------------------------------------------
>
>                 Key: JBIDE-21119
>                 URL: https://issues.jboss.org/browse/JBIDE-21119
>             Project: Tools (JBoss Tools)
>          Issue Type: Bug
>          Components: maven, target-platform, upstream
>    Affects Versions: 4.3.0.Final
>            Reporter: Nick Boldt
>            Assignee: Fred Bricon
>             Fix For: 4.3.1.CR1
>
>
> Fred said: {quote}So the m2e archetype feature also embeds a version of vulnerable commons-collections, that we need to fix upstream (even though it's not really vulnerable, just makes people cringy) -- JBDS-3560
> {quote}
> So, we need a new version of m2e 1.6.x (with fix for apache commons collections 3.2.2 / COLLECTIONS-580 / JBDS-3560) and we can then mirror it and update the 4.50.x and 4.51.x TPs (for JBDS 9.1, not 9.0.1).



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)