QUESTION: When a new version of Data360 Analyze is released, do you always use latest/most recent version of dependencies / 3rd party products?
ANSWER: When a new version of Analyze is released, we may not use the most recent, because if a new version of Tomcat, for example, is released on Tuesday, then a release of Analyze the next day will not use that "latest" version. However, we are continually bringing along new versions as soon as they can be tested.
Essentially, the timing has to do with our development cycle time. We have to be aware that a new element has been released, and then we have to test it before we can include it. But, generally, we incorporate new 3rd party releases as soon as reasonable for our development cycle.
If a critical security flaw was discovered in one of our 3rd party products, we would release a new point version of the product which the team will then upgrade to. For example, if your current version is 3.6.1 and a critical vulnerability was discovered in Tomcat, we would likely issue a new 3.6.9 version and have you upgrade to that.
Comments
0 comments
Please sign in to leave a comment.