[gatein-commits] gatein SVN: r8752 - epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/serverAddon/gatein.ear.

[do-not-reply at jboss.org]

Author: hfnukal
Date: 2012-06-28 10:36:26 -0400 (Thu, 28 Jun 2012)
New Revision: 8752

Modified:
   epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/serverAddon/gatein.ear/pom.xml
Log:
Bug 804897 - EMBARGOED CVE-2012-1167 JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm

Modified: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/serverAddon/gatein.ear/pom.xml
===================================================================
--- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/serverAddon/gatein.ear/pom.xml	2012-06-27 12:55:08 UTC (rev 8751)
+++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/serverAddon/gatein.ear/pom.xml	2012-06-28 14:36:26 UTC (rev 8752)
@@ -1321,12 +1321,12 @@
         </dependency>
 
         <!-- included in EAP endorsed dir -->
-<!--        <dependency>
+        <dependency>
             <artifactId>xercesImpl</artifactId>
-            <groupId>apache-xerces</groupId>
+            <groupId>xerces</groupId>
             <type>jar</type>
-            <version>2.9.1</version>
-        </dependency>-->
+            <version>2.9.1-patch-01</version>
+        </dependency>
     </dependencies>
 
     <build>