Announcement: Patch available for FACES-1917 security vulnerability

[Neil Griffin, geändert vor 9 Jahren.]

Liferay, Inc. has developed a patch jar for FACES-1917.

Please refer to the issue comments for the patch jar dependency information.

[Achim Nick, geändert vor 9 Jahren.]

Hi Neil,

I have a problem with using the patch for 3.1.4-ga5.
The pom.xml from the patch references a parent-pom (see code fragment). But this parent pom file is not available a maven central.

In the customer portal liferay recommends to upload the patch-jar to the local repository. This is a possible solution. But from my point of view this is not a good solution.

...
<parent>
   <groupid>com.liferay.faces.patches</groupid>
   <artifactid>liferay-faces-patches</artifactid>
   <version>3.1.4-ga5</version>
   <relativepath>../pom.xml</relativepath>
</parent>
...

[Neil Griffin, geändert vor 9 Jahren.]

Thanks so much for reporting this problem. We just uploaded the parent pom (for each affected version of Liferay Faces) to the Maven Central staging repository. It should be available in Maven Central within a few hours from now after the indexes are rebuilt.