Foros de discusión

Announcement: Patch available for FACES-1917 security vulnerability

thumbnail
Neil Griffin, modificado hace 9 años.

Announcement: Patch available for FACES-1917 security vulnerability

Liferay Legend Mensajes: 2655 Fecha de incorporación: 27/07/05 Mensajes recientes
Liferay, Inc. has developed a patch jar for FACES-1917.

Please refer to the issue comments for the patch jar dependency information.
Achim Nick, modificado hace 9 años.

RE: Announcement: Patch available for FACES-1917 security vulnerability

New Member Mensajes: 3 Fecha de incorporación: 14/09/07 Mensajes recientes
Hi Neil,

I have a problem with using the patch for 3.1.4-ga5.
The pom.xml from the patch references a parent-pom (see code fragment). But this parent pom file is not available a maven central.

In the customer portal liferay recommends to upload the patch-jar to the local repository. This is a possible solution. But from my point of view this is not a good solution.

...
<parent>
   <groupid>com.liferay.faces.patches</groupid>
   <artifactid>liferay-faces-patches</artifactid>
   <version>3.1.4-ga5</version>
   <relativepath>../pom.xml</relativepath>
</parent>
...
thumbnail
Neil Griffin, modificado hace 9 años.

RE: Announcement: Patch available for FACES-1917 security vulnerability

Liferay Legend Mensajes: 2655 Fecha de incorporación: 27/07/05 Mensajes recientes
Thanks so much for reporting this problem. We just uploaded the parent pom (for each affected version of Liferay Faces) to the Maven Central staging repository. It should be available in Maven Central within a few hours from now after the indexes are rebuilt.