Author: hfnukal Date: 2012-03-14 12:18:37 -0400 (Wed, 14 Mar 2012) New Revision: 8595 Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-4610/ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-4610/jbossweb.jar Modified: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/build.xml Log: Bug 794382 - (JBEPP-1426) Security issues have been identified in jboss web that impact EPP, BZ#741401 BZ#720948 Modified: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/build.xml =================================================================== --- epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/build.xml 2012-03-14 16:16:37 UTC (rev 8594) +++ epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/build.xml 2012-03-14 16:18:37 UTC (rev 8595) @@ -78,8 +78,9 @@ </zip> </target> - <target name="finalTasks" depends="modifyStartupMessage,jbossws-native-PATCH,patch-RESTEasy-CVE-2012-081"> + <target name="finalTasks" depends="modifyStartupMessage,jbossws-native-PATCH,patch-RESTEasy-CVE-2012-081,patch-JBossWeb-CVE-2011-4610"> </target> + <!-- Patching startup message in log when starting portal --> <target name="modifyStartupMessage"> @@ -140,4 +141,12 @@ <copy overwrite="true" file="${resteasy_resource_jar}/resteasy-jaxrs.jar" tofile="${epp.path}/seam/lib/resteasy-jaxrs.jar"/> <copy overwrite="true" file="${resteasy_resource_jar}/resteasy-jettison-provider.jar" tofile="${epp.path}/seam/lib/resteasy-jettison-provider.jar"/> </target> + + <target name="patch-JBossWeb-CVE-2011-4610"> + <echo>Patch for CVE-2012-081</echo> + <property name="jbossweb_resource_jar" value="${basedir}/src/main/resources/eap/CVE-2011-4610/jbossweb.jar" /> + <copy overwrite="true" file="${jbossweb_resource_jar}" tofile="${epp.path}/jboss-as/server/default/deploy/jbossweb.sar/jbossweb.jar"/> + <copy overwrite="true" file="${jbossweb_resource_jar}" tofile="${epp.path}/jboss-as/server/production/deploy/jbossweb.sar/jbossweb.jar"/> + <copy overwrite="true" file="${jbossweb_resource_jar}" tofile="${epp.path}/jboss-as/server/all/deploy/jbossweb.sar/jbossweb.jar"/> + </target> </project> \ No newline at end of file Added: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-4610/jbossweb.jar =================================================================== (Binary files differ) Property changes on: epp/portal/branches/EPP_5_2_Branch/distribution/jboss-epp/src/main/resources/eap/CVE-2011-4610/jbossweb.jar ___________________________________________________________________ Added: svn:executable + * Added: svn:mime-type + application/octet-stream