Here is official request from Linux Tools for a respin for this one. Should I feel free to commit to simrel when done?
On Thu, Jan 13, 2022 at 11:36 AM Ed Merks <ed.me...@gmail.com> wrote: > FYI, > > If https://bugs.eclipse.org/bugs/show_bug.cgi?id=578192 is fixed quickly > (in the next few hours) I will respin for that which will pick up > anything else that is contributed/committed between now and then. > > Regards, > Ed > > On 13.01.2022 09:39, Ed Merks wrote: > > The deadline for contributions is Wednesday evening. I can hold off > > promotion if someone asks me to do that ahead of time, but once I get > > up on Thursday morning, I will promote what's there at that time as I > > have done today... > > > > I can respin if necessary, but this issue is not one that cropped up > > today nor last night so... > > > > Regards, > > Ed > > > > > > On 13.01.2022 09:31, Alexander Fedorov wrote: > >> Hello, > >> > >> Some hours ago I've found that Orbit still contributes the log4j > >> vulnerability to the SimRel > >> > >> Thanks to Jonah, the situation is better, now we have updated Orbit > >> with log4j 2.15.0 > >> > >> But shouldn't we hold a train a bit to use the latest fix from Orbit > >> that provides log4j 2.17.1? > >> > >> Regards, > >> AF > >> > >> 12/18/2021 4:19 PM, Andrey Loskutov пишет: > >>> After update is before update... > >>> > >>> log4j has now 2.17.0. > >>> https://logging.apache.org/log4j/2.x/security.html#CVE-2021-45105 > >>> > >>> > >>> Am 15. Dezember 2021 12:03:21 MEZ schrieb Alexander Fedorov > >>> <alexander.fedo...@arsysop.ru>: > >>>> Thank you, Andrey! > >>>> > >>>> Just merged https://git.eclipse.org/r/c/orbit/orbit-recipes/+/188862 > >>>> Will be working to provide Eclipse Passage 2.2.2 service release. > >>>> > >>>> Regards, > >>>> AF > >>>> > >>>> 12/15/2021 1:38 PM, Andrey Loskutov пишет: > >>>>> +1 from me. > >>>>> The hype is too big. > >>>>> > >>>>> Re-posting your message to collect more feedback regarding: > >>>>> should we replace 2.15.0 with 2.16.0 in Orbit? > >>>>> > >>>>> _______________________________________________ > >>>>> cross-project-issues-dev mailing list > >>>>> cross-project-issues-dev@eclipse.org > >>>>> To unsubscribe from this list, > >>>>> visithttps:// > www.eclipse.org/mailman/listinfo/cross-project-issues-dev > >>>>> > >>> -- > >>> Kind regards, > >>> Andrey Loskutov > >>> > >>> https://www.eclipse.org/user/aloskutov > >>> Спасение утопающих - дело рук самих утопающих > >>> > >> > >> _______________________________________________ > >> cross-project-issues-dev mailing list > >> cross-project-issues-dev@eclipse.org > >> To unsubscribe from this list, visit > >> https://www.eclipse.org/mailman/listinfo/cross-project-issues-dev > _______________________________________________ > cross-project-issues-dev mailing list > cross-project-issues-dev@eclipse.org > To unsubscribe from this list, visit > https://www.eclipse.org/mailman/listinfo/cross-project-issues-dev > -- Aleksandar Kurtakov Red Hat Eclipse Team
_______________________________________________ cross-project-issues-dev mailing list cross-project-issues-dev@eclipse.org To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/cross-project-issues-dev
