Hi Guido,

the community maintains the LTS line for 12 weeks and this is already a
time-consuming operation on volunteers time.

Here are the options I see available for you :
- Migrate your jobs out of the maven job type. It has been pointed out too
many times on this ML how 'evil' it is.
- If your build systems allow it, you can migrate to JDK7+ but still
compile using JDK6 using the maven toolchain
<https://maven.apache.org/guides/mini/guide-using-toolchains.html>
- Consider buying support from commercial offering which offer longer-term
support (Cloudbees supports LTS up to 1 year
<https://www.cloudbees.com/products/cloudbees-jenkins-platform#compare>,
disclaimer : I work for them)
- Backport the important security fixes you need on your own fork

Best regards,

Vincent

Vincent

2015-11-24 10:06 GMT+01:00 guido.wojke <guido.wo...@1und1.de>:

> Hello everybody,
>
> due to a JDK 6 dependency on our build system we can't upgrade to Jenkins
> 1.625.2 which forces a JDK 7 or higher to build maven job type.
> We use the LTS 1.609.3 with the security workaround desribed here:
>
> https://jenkins-ci.org/content/mitigating-unauthenticated-remote-code-execution-0-day-jenkins-cli
>
> Is it possible to provide a  LTS Version 1.609.4 with the security
> update(s) provided in
> the 1.625.1->1.625.2 update (f.e. the Important security fixes)?
>
> Best regards,
> Guido
>
> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to jenkinsci-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-users/4a82a4bb-a0b1-43fb-b173-3a72c338514a%40googlegroups.com
> <https://groups.google.com/d/msgid/jenkinsci-users/4a82a4bb-a0b1-43fb-b173-3a72c338514a%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-users/CAH-zGChYmYwUV%3Dr22UbOB0aFn6U2G%3DwFrOEex4fRiBWwYVV09Q%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to