AFAIK that vulnerability is inside the built javadoc-html. Is that generated javadoc part of the release?
I checked http://apache.openmirror.de/camel/apache-camel/2.12.2/apache-camel-2.12.2.zip and didnt found any javadoc. So that wouldnt force the use of Java7. Jan > -----Ursprüngliche Nachricht----- > Von: Willem Jiang [mailto:willem.ji...@gmail.com] > Gesendet: Donnerstag, 20. Februar 2014 08:43 > An: dev@camel.apache.org > Betreff: Re: [CANCEL][VOTE] Release Apache Camel 2.12.3 > > "Supports JDK 6" could mean from the source and binary level, but we > still need to choice one version of JDK to build the kit. There is a > known javadoc issue[1] which we cannot get fix from public released > JDK6, so I prefer to build the kit with JDK7 and make sure the classes > are target to 1.6. > > I can cut a new version Camel 2.12.3 this week but we need to postpone > the release of Camel 2.13.0 , as I don’t have enough time to do two > release this month. > > -- > Willem Jiang > > Red Hat, Inc. > Web: http://www.redhat.com > Blog: http://willemjiang.blogspot.com(http://willemjiang.blogspot.com/) > (English) > http://jnn.iteye.com(http://jnn.javaeye.com/) (Chinese) > Twitter: willemjiang > Weibo: 姜宁willem > > > > On February 20, 2014 at 11:03:42 AM, Hadrian Zbarcea > (hzbar...@gmail.com) wrote: > > > > While we had enough votes to pass this release I chose not to. I > don't > > have cycles to cut another release in the next week week or so. > > This > > release is also blocking the AMQ release. > > > > I would not release with 1.7 anyway, so maybe it would be a good idea > > to look into fixing the html doc stuff with 1.6 if it's that > important > > to you guys. There are many users who rebuild Camel from sources and > > what you are saying is that while we support 1.6, we actually don't. > > > > Cheers, > > Hadrian > > > > > > > > On 02/19/2014 09:53 PM, Hadrian Zbarcea wrote: > > > On 02/15/2014 11:16 PM, Hadrian Zbarcea wrote: > > >> This is a vote to release Apache Camel 2.12.3, a patch release > > coming > > >> with about 128 issues fixed. > > >> > > >> Release notes: > > >> > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12 > > >> 311211&version=12325593 > > >> > > >> > > >> Staging repo: > > >> https://repository.apache.org/content/repositories/orgapachecamel- > 1 > > >> 002 > > >> > > >> Tarballs: > > >> https://repository.apache.org/content/repositories/orgapachecamel- > 1 > > >> 002/org/apache/camel/apache-camel/2.12.3/ > > >> > > >> > > >> Tag: > > >> https://git-wip- > us.apache.org/repos/asf?p=camel.git;a=tag;h=4bf31d2 > > >> e2cbc34fda60d68c0dd33cb39d63ba1c6 > > >> > > >> > > >> Please test this release candidate and cast your vote. > > >> [ ] +1 Release the binary as Apache Camel 2.12.3 [ ] -1 Veto the > > >> release (provide specific comments) Vote is open for at least 72 > > >> hours. > > >> > > >> Thanks, > > >> Hadrian > > > > > > >
