Hide Forgot
Date of First Response: 2008-10-30 06:06:24 project_key: SOA Needed since some of the issues we have are EAP based and may be fixed in their own patches.
EAP 4.3.0 CP01 CR1 is available at: http://porkchop.devel.redhat.com/devel/candidates/JBEAP4.3.0/CR1/zip/QA/ If this is GA before (say) November 4th, we could use it, otherwise, we should use EAP 4.3.0 CP02, plus the fix for CVE-2008-2938 (see SOA-967).
Use EAP 4.3.0 CP02. Added in revision 2282 of: build-tools/dependencies.properties build-tools/builders/eap/build.xml Commit message: Pull up revision 1575: > updated eap to CP02 CR2
Apply the fix for CVE-2008-2938. Added in revision 2283 of: build-tools/builders/eap/build.xml Commit message: Pull across revision 2236 from the 4.3 branch. > Apply JBossWeb patches to EAP for JIRA SOA-967.
Updated 4.2 branch build to use to EAP 4.3.0 CP03. Revision 2319 of: build-tools/deps/jboss-eap-4.3.0.GA_CP03.zip build-tools/docs/jboss-eap-docs-4.3.0.GA_CP03.zip Commit message: Add EAP 4.3.0 CP03 binary and docs. Revision 2321 of: build-tools/builders/eap/build.xml build-tools/dependencies.properties Commit message: Use EAP 4.3.0 CP03 as a base. JBossWeb patch (SOA-967 - CVE-2008-2938) is no longer used. Revision 2322 of: build-tools/deps/patches/ Commit message: Remove (no longer used) JBossWeb patches.
Verified in 4.2 CP03 CR5 [ldimaggi@ldimaggi jboss-as]$ grep jboss.jar jar-versions.xml <jar name="jboss.jar" specVersion="4.3.0.GA_CP03" specVendor="JBoss (http://www.jboss.org/)" specTitle="JBoss" implVersion="4.3.0.GA_CP03 (build: SVNTag=JBPAPP_4_3_0_GA_CP03 date=200810241616)" implVendor="JBoss Inc." implTitle="JBoss [EAP]" implVendorID="http://www.jboss.org/" implURL="http://www.jboss.org/" sealed="false" md5Digest="4cbfd2e943c4b5c5e024e4b8c87330b0"/> Manifest-Version: 1.0 Specification-Title: JBoss Created-By: R27.1.0-109-73164-1.5.0_08-20061129-1418-linux-ia32 (BEA S ystems, Inc.) Ant-Version: Apache Ant 1.6.5 Implementation-Title: JBoss [EAP] Specification-Vendor: JBoss (http://www.jboss.org/) Specification-Version: 4.3.0.GA_CP03 Implementation-Vendor-Id: http://www.jboss.org/ Implementation-Version: 4.3.0.GA_CP03 (build: SVNTag=JBPAPP_4_3_0_GA_C P03 date=200810241616) Implementation-Vendor: JBoss Inc. Implementation-URL: http://www.jboss.org/