Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [iot-pmc] Eclipse Kura 4.1.1 service release

Hi Matteo,

thanks for letting us know, and best wishes for the project.

As you say, you don't need permission from the PMC to make a service release.  Just for reference (including me), I quote Wayne from a couple of years ago:

If you are doing a service release, you are not required to engage in a Release Review, get PMC approval, or submit your IP Log for review by the IP Team. You are still required to abide by the terms of the Eclipse IP Policy, so please do make sure that you have the appropriate CQs to cover all third party content that you've added as part of your service release. Please just update your release record with a really good description and you're done.

Ian

On 30/03/2020 10:27, Maiero, Matteo wrote:
Hello PMC,
The Eclipse Kura project would like to make an Eclipse Kura 4.1.1 service release to address various discovered bugs and functional issues. 
In [1] the list of back ports.
Among those back ports, we would like to address also some CVEs in Jetty, updating the dependency to version 9.4.19. Such change will not have a functional impact but mainly tries to address potential vulnerabilities in the dependency.
Being a service release there should be not direct involvement of the PMC, but we wanted to keep you up to date of such change, being a security fix affecting one of the Eclipse products.

Needed to mention that all the changes made are not impacting the programmatic APIs and the previously mentioned fixes will be mentioned in the Kura release notes.

Best regards,
Matteo  

[1] https://github.com/eclipse/kura/issues/2726

-- 
Matteo Maiero
Senior Software Engineer

direct: +39 0433 485 902

EUROTECH
Imagine.Build.Succeed.
HEADQUARTERS
EUROTECH S.p.A. – Via Fratelli Solari, 3/a | 33020 Amaro UD | Italy | Tel. +39. 0433 485411  | Fax +39. 0433 485499 |
Cap. Soc. 8.878.946,00 € I.V. | P.IVA / C.F.: IT 01791330309 | REA Udine 196115
www.eurotech.com
____________________________________

Il presente messaggio ed ogni suo allegato sono da intendersi inviati esclusivamente agli effettivi destinatari e potrebbero essere soggetti a restrizioni legali. Se avete ricevuto questo messaggio per errore vi invitiamo a darne immediata notifica al mittente e cancellarlo dal vostro sistema. Qualsiasi altro uso di questo messaggio da parte vostra e' strettamente proibito.
 
This e-mail, and any file attached to it, is meant only for the intended recipient of the transmission and may be a communication privileged by law. If you have received it in error, please notify the sender immediately and delete the original from your system. Any other use of this e-mail by you is strictly forbidden.


_______________________________________________
iot-pmc mailing list
iot-pmc@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/iot-pmc

-- 
Ian Craggs
Eclipse IoT PMC; Eclipse Paho Project Lead; OASIS MQTT TC Member

Back to the top