Hi Guido,

the community maintains the LTS line for 12 weeks and this is already a
time-consuming operation on volunteers time.

Here are the options I see available for you :
- Migrate your jobs out of the maven job type. It has been pointed out too
many times on this ML how 'evil' it is.
- If your build systems allow it, you can migrate to JDK7+ but still
compile using JDK6 using the maven toolchain
<https://maven.apache.org/guides/mini/guide-using-toolchains.html>
- Consider buying support from commercial offering which offer longer-term
support (Cloudbees supports LTS up to 1 year
<https://www.cloudbees.com/products/cloudbees-jenkins-platform#compare>,
disclaimer : I work for them)
- Backport the important security fixes you need on your own fork

Best regards,

Vincent

Vincent

2015-11-24 10:06 GMT+01:00 guido.wojke <[email protected]>:

> Hello everybody,
>
> due to a JDK 6 dependency on our build system we can't upgrade to Jenkins
> 1.625.2 which forces a JDK 7 or higher to build maven job type.
> We use the LTS 1.609.3 with the security workaround desribed here:
>
> https://jenkins-ci.org/content/mitigating-unauthenticated-remote-code-execution-0-day-jenkins-cli
>
> Is it possible to provide a  LTS Version 1.609.4 with the security
> update(s) provided in
> the 1.625.1->1.625.2 update (f.e. the Important security fixes)?
>
> Best regards,
> Guido
>
> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-users/4a82a4bb-a0b1-43fb-b173-3a72c338514a%40googlegroups.com
> <https://groups.google.com/d/msgid/jenkinsci-users/4a82a4bb-a0b1-43fb-b173-3a72c338514a%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/CAH-zGChYmYwUV%3Dr22UbOB0aFn6U2G%3DwFrOEex4fRiBWwYVV09Q%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to