Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[theia-dev] [security] BugFix release 1.31.1. Shall we also produce an updated community release with this fix?
  • From: Marc Dumais <marc.dumais@xxxxxxxxxxxx>
  • Date: Fri, 4 Nov 2022 14:38:37 +0000
  • Accept-language: en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=tob7L/QoBkPx7FVC7S+lmuL3rR5v90sOXbM6a4/Vf64=; b=cPlNXqnQ/7SsF3NOFAg5Ux2DOxnGysxbZTJbZLWGbTnt+fFDsbSVmpFP+AHg4wuVZFWNcp6G3k1V6FVhn7ZZv/G/n5GCjJZu1RX+mXJW+c2mKDye2O0J9TDrSrQ5ojpdczGg/kSBHnRSv+yP0gcdB7kV/c/hQTDTrNCdoweAyB67Cve4eQ1nX2fKYbn8ZshDfPg5qUGYfsO9EErHHlDhIEjdlw90Wa5/dje5snuEEuVBSr8NjEEIcAnQ8dyS/X+gq55l3g5dPROKCIRUGVc0I2fjMqGQwQ3Qx9EIg6MjirUTIAucCm4889gwy9sdRszMFf07cWXkHE84Kgv+zdlZLw==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ShYX2BX+0/Ap25wnZrMbFKFaQNIWisxt3yRvM4XrcWrDj+3DgzmSVlVc606uLEyw37zOiQcosB5Vo33YEUhnpuosw96Y9tlVVmV2F1dfhjpfTrKWSAfsDkBTz5oqZTckcMyQ/y4aiKSPdTcue1yBIYgP1Vdh/ln/bw2I/akKuLWX8xSLPYfDxoO16T3UcLZra5uPtFujvhMR4Ujxh2iJg2YXoovTTUavcsLZsRZ9727gjAm9Jy0zsYCkQtafV8PcBsXm2fBjm5Qj60t8IN4dxP9hS5p1eO3qEWbcjALoFqOyUA4Rrj3LHrPTbIPT9QtQBs5/qpjwRi764FrFFVzsIg==
  • Delivered-to: theia-dev@xxxxxxxxxxx
  • List-archive: <https://www.eclipse.org/mailman/private/theia-dev/>
  • List-help: <mailto:theia-dev-request@eclipse.org?subject=help>
  • List-subscribe: <https://www.eclipse.org/mailman/listinfo/theia-dev>, <mailto:theia-dev-request@eclipse.org?subject=subscribe>
  • List-unsubscribe: <https://www.eclipse.org/mailman/options/theia-dev>, <mailto:theia-dev-request@eclipse.org?subject=unsubscribe>
  • Msip_labels:
  • Thread-index: AQHY8Fe2jh5+dHXejEaBWmuEvuzswQ==
  • Thread-topic: [security] BugFix release 1.31.1. Shall we also produce an updated community release with this fix?
Hi,

A couple of days ago, we did an unplanned bugfix release, to address a vulnerability [1] that we recently became aware-of, against one of our runtime dependency: "socket.io-parser".

https://github.com/eclipse-theia/theia/releases/tag/v1.31.1

We are considering producing an updated community release that contains the same fix. We will have an opportunity to discuss this at the next dev-meeting [2].

Regards,
Marc

[1]: https://security.snyk.io/vuln/SNYK-JS-SOCKETIOPARSER-3091012
[2]: https://github.com/eclipse-theia/theia/wiki/Dev-Meetings/]



Back to the top