Verification Procedure for Patch on 6.1.1

[7年前 に Daniel Chan によって更新されました。]

Dear Sir/Madam,

I am testing the latest Security Patch for Liferay Community version 6.1.1. How can we verify the patch applied correctly ?

Regards
Daniel

[7年前 に David H Nebinger によって更新されました。]

I don't know that you can confirm successful application. I think that if you do not get a negative application (some sort of error generated during application), you are to assume success.

[7年前 に Daniel Chan によって更新されました。]

David H Nebinger:

I don't know that you can confirm successful application. I think that if you do not get a negative application (some sort of error generated during application), you are to assume success.

Dear David,

Thank you for your prompted response.
Should we check the version no, sub-version, revision # of liferay such that I know the patch is applied correctly ? How can I got them ?

Regards
Daniel

[7年前 に David H Nebinger によって更新されました。]

Well, it doesn't really update the release number... It actually kind of makes sense, how do you define a version number for each permutation of some patches applied, some not...

Like I said, I think your only possibility of success is if the patch install process didn't fail.

[7年前 に Daniel Chan によって更新されました。]

David H Nebinger:

Well, it doesn't really update the release number... It actually kind of makes sense, how do you define a version number for each permutation of some patches applied, some not...

Like I said, I think your only possibility of success is if the patch install process didn't fail.

Dear David

I have a Liferay patch procedure for Liferay 6.1.1 CE as follows. Could you advice the verification procedure on Liferay after patch ?

Regards
Daniel


SCOPE

This patch covers the following issues:
LPS-28550, LPS-29061, LPS-29148, LPS-29268, LPS-29338, LPS-29341, LPS-29872,
LPS-30093, LPS-30437, LPS-30586, LPS-30796, LPS-30940, LPS-31063, LPS-31090,
LPS-31750, LPS-33764

INSTALLATION

1. Add ext-portal-service.jar to your application server's endorsed directory.

2. Add ext-portal-impl.jar to the folder:
<application-server>/.../<liferay-context>/WEB-INF/lib

3. Unzip ext-portal-web.zip to the folder:
<application-server>/.../<liferay-context>

RELEASE NOTE

* LPS-29061
The [e-mail] user will no longer be created if this patch is applied
before the setup wizard runs. For existing sites, administrators should
manually check if the [e-mail] user exists and delete the user if
necessary.

DISCLAIMER

This library is free software; you can redistribute it and/or modify it under
the terms of the GNU Lesser General Public License as published by the Free
Software Foundation; either version 2.1 of the License, or (at your option) any
later version.

This library is distributed in the hope that it will be useful, but WITHOUT ANY
WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.

[7年前 に Olaf Kock によって更新されました。]

Daniel Chan:

This patch covers the following issues:
LPS-28550, LPS-29061, LPS-29148, LPS-29268, LPS-29338, LPS-29341, LPS-29872,
LPS-30093, LPS-30437, LPS-30586, LPS-30796, LPS-30940, LPS-31063, LPS-31090,
LPS-31750, LPS-33764

You could check one of these issues - see if you can reproduce it. If you can't there's a good chance that it's been fixed by the patch. Which - as it's a single patch - means a good probability that your patch is in.

However, you really should upgrade to the latest version. Yours doesn't get any more love for quite some time now (since 6.2 is out) - and I couldn't even say if there are any issues that are still in 6.1 which are fixed in 6.2...

The reason you don't find any later patches for 6.1 is not that there aren't any vulnerabilities - the reason is that 6.2 is out and only the latest CE release gets patches. If you need them for longer, consider EE (which, by the way, comes with a patching tool that will tell you which patch you have installed - neatly solving your initial problem)

[7年前 に Daniel Chan によって更新されました。]

Olaf Kock:

Daniel Chan:

This patch covers the following issues:
LPS-28550, LPS-29061, LPS-29148, LPS-29268, LPS-29338, LPS-29341, LPS-29872,
LPS-30093, LPS-30437, LPS-30586, LPS-30796, LPS-30940, LPS-31063, LPS-31090,
LPS-31750, LPS-33764

You could check one of these issues - see if you can reproduce it. If you can't there's a good chance that it's been fixed by the patch. Which - as it's a single patch - means a good probability that your patch is in.

However, you really should upgrade to the latest version. Yours doesn't get any more love for quite some time now (since 6.2 is out) - and I couldn't even say if there are any issues that are still in 6.1 which are fixed in 6.2...

The reason you don't find any later patches for 6.1 is not that there aren't any vulnerabilities - the reason is that 6.2 is out and only the latest CE release gets patches. If you need them for longer, consider EE (which, by the way, comes with a patching tool that will tell you which patch you have installed - neatly solving your initial problem)

Dear Olaf

Thank you for your information
I will let my boss to know that.

Regards
Daniel

[7年前 に Olaf Kock によって更新されました。]

I forgot to mention yet one more aspect: Guess how many updates to 6.2 CE you can expect now that 7 CE is out. Hint: It follows the same principle.

[7年前 に Daniel Chan によって更新されました。]

noted with thank you