4:30 a.m.
Upgrade to Mojarra 2.1.5 as in Glassfish
----------------------------------------
Key: AS7-2811
URL: https://issues.jboss.org/browse/AS7-2811
Project: Application Server 7
Issue Type: Bug
Components: JSF
Affects Versions: 7.1.0.Beta1
Reporter: Juergen Zimmermann
Assignee: Stan Silvert
JBoss is currently using 2.1.3. However, at
https://maven.java.net/content/repositories/releases/org/glassfish/javax.... there is
already 2.1.5 as being used in the latest Glassfish release.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:35 a.m.
[
https://issues.jboss.org/browse/AS7-2811?page=com.atlassian.jira.plugin.s...
]
Stan Silvert commented on AS7-2811:
-----------------------------------
We'll be doing an upgrade when this is fixed:
http://java.net/jira/browse/JAVASERVERFACES-2247
Upgrade to Mojarra 2.1.5 as in Glassfish
----------------------------------------
Key: AS7-2811
URL: https://issues.jboss.org/browse/AS7-2811
Project: Application Server 7
Issue Type: Bug
Components: JSF
Affects Versions: 7.1.0.Beta1
Reporter: Juergen Zimmermann
Assignee: Stan Silvert
JBoss is currently using 2.1.3. However, at
https://maven.java.net/content/repositories/releases/org/glassfish/javax.... there is
already 2.1.5 as being used in the latest Glassfish release.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
10:15 p.m.
[
https://issues.jboss.org/browse/AS7-2811?page=com.atlassian.jira.plugin.s...
]
David Jorm commented on AS7-2811:
---------------------------------
http://java.net/jira/browse/JAVASERVERFACES-2247 is now fixed in 2.1.5. I have verified
that the fix resolves the flaw. Please go ahead with this upgrade ASAP, as the security
issue is of a high severity.
Upgrade to Mojarra 2.1.5 as in Glassfish
----------------------------------------
Key: AS7-2811
URL: https://issues.jboss.org/browse/AS7-2811
Project: Application Server 7
Issue Type: Bug
Components: JSF
Affects Versions: 7.1.0.Beta1
Reporter: Juergen Zimmermann
Assignee: Stan Silvert
JBoss is currently using 2.1.3. However, at
https://maven.java.net/content/repositories/releases/org/glassfish/javax.... there is
already 2.1.5 as being used in the latest Glassfish release.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
10:15 p.m.
[
https://issues.jboss.org/browse/AS7-2811?page=com.atlassian.jira.plugin.s...
]
David Jorm updated AS7-2811:
----------------------------
Priority: Critical (was: Major)
Description: JBoss is currently using 2.1.3. However, at
https://maven.java.net/content/repositories/releases/org/glassfish/javax.... there is
already 2.1.5 as being used in the latest Glassfish release. 2.1.5 also resolves a serious
security issue, as documented here: http://java.net/jira/browse/JAVASERVERFACES-2247
(was: JBoss is currently using 2.1.3. However, at
https://maven.java.net/content/repositories/releases/org/glassfish/javax.... there is
already 2.1.5 as being used in the latest Glassfish release.)
Upgrade to Mojarra 2.1.5 as in Glassfish
----------------------------------------
Key: AS7-2811
URL: https://issues.jboss.org/browse/AS7-2811
Project: Application Server 7
Issue Type: Bug
Components: JSF
Affects Versions: 7.1.0.Beta1
Reporter: Juergen Zimmermann
Assignee: Stan Silvert
Priority: Critical
JBoss is currently using 2.1.3. However, at
https://maven.java.net/content/repositories/releases/org/glassfish/javax.... there is
already 2.1.5 as being used in the latest Glassfish release. 2.1.5 also resolves a serious
security issue, as documented here: http://java.net/jira/browse/JAVASERVERFACES-2247
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:07 a.m.
[
https://issues.jboss.org/browse/AS7-2811?page=com.atlassian.jira.plugin.s...
]
Stan Silvert updated AS7-2811:
------------------------------
Fix Version/s: 7.1.0.CR1
Priority: Blocker (was: Critical)
JAVASERVERFACES-2247 is not closed and 2.1.5 is not yet released. I am changing this to a
blocker. We won't release CR1 without this fix.
Upgrade to Mojarra 2.1.5 as in Glassfish
----------------------------------------
Key: AS7-2811
URL: https://issues.jboss.org/browse/AS7-2811
Project: Application Server 7
Issue Type: Bug
Components: JSF
Affects Versions: 7.1.0.Beta1
Reporter: Juergen Zimmermann
Assignee: Stan Silvert
Priority: Blocker
Fix For: 7.1.0.CR1
JBoss is currently using 2.1.3. However, at
https://maven.java.net/content/repositories/releases/org/glassfish/javax.... there is
already 2.1.5 as being used in the latest Glassfish release. 2.1.5 also resolves a serious
security issue, as documented here: http://java.net/jira/browse/JAVASERVERFACES-2247
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:48 a.m.
[
https://issues.jboss.org/browse/AS7-2811?page=com.atlassian.jira.plugin.s...
]
Juergen Zimmermann commented on AS7-2811:
-----------------------------------------
2.1.5 is available since Nov 23:
https://maven.java.net/content/repositories/releases/org/glassfish/javax....
Upgrade to Mojarra 2.1.5 as in Glassfish
----------------------------------------
Key: AS7-2811
URL: https://issues.jboss.org/browse/AS7-2811
Project: Application Server 7
Issue Type: Bug
Components: JSF
Affects Versions: 7.1.0.Beta1
Reporter: Juergen Zimmermann
Assignee: Stan Silvert
Priority: Blocker
Fix For: 7.1.0.CR1
JBoss is currently using 2.1.3. However, at
https://maven.java.net/content/repositories/releases/org/glassfish/javax.... there is
already 2.1.5 as being used in the latest Glassfish release. 2.1.5 also resolves a serious
security issue, as documented here: http://java.net/jira/browse/JAVASERVERFACES-2247
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
10:24 a.m.
[
https://issues.jboss.org/browse/AS7-2811?page=com.atlassian.jira.plugin.s...
]
Stan Silvert commented on AS7-2811:
-----------------------------------
You are right. In case you missed it, I verified with Ed that they did release but
haven't yet announced it. I'll try to get JSF updated before the end of the
week.
Upgrade to Mojarra 2.1.5 as in Glassfish
----------------------------------------
Key: AS7-2811
URL: https://issues.jboss.org/browse/AS7-2811
Project: Application Server 7
Issue Type: Bug
Components: JSF
Affects Versions: 7.1.0.Beta1
Reporter: Juergen Zimmermann
Assignee: Stan Silvert
Priority: Blocker
Fix For: 7.1.0.CR1
JBoss is currently using 2.1.3. However, at
https://maven.java.net/content/repositories/releases/org/glassfish/javax.... there is
already 2.1.5 as being used in the latest Glassfish release. 2.1.5 also resolves a serious
security issue, as documented here: http://java.net/jira/browse/JAVASERVERFACES-2247
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
2:59 a.m.
[
https://issues.jboss.org/browse/AS7-2811?page=com.atlassian.jira.plugin.s...
]
Juergen Zimmermann commented on AS7-2811:
-----------------------------------------
BTW, in the meantime 2.1.6 is available:
https://maven.java.net/content/repositories/releases/org/glassfish/javax....
Upgrade to Mojarra 2.1.5 as in Glassfish
----------------------------------------
Key: AS7-2811
URL: https://issues.jboss.org/browse/AS7-2811
Project: Application Server 7
Issue Type: Bug
Components: JSF
Affects Versions: 7.1.0.Beta1
Reporter: Juergen Zimmermann
Assignee: Stan Silvert
Priority: Blocker
Fix For: 7.1.0.CR1
JBoss is currently using 2.1.3. However, at
https://maven.java.net/content/repositories/releases/org/glassfish/javax.... there is
already 2.1.5 as being used in the latest Glassfish release. 2.1.5 also resolves a serious
security issue, as documented here: http://java.net/jira/browse/JAVASERVERFACES-2247
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
9:08 a.m.
[
https://issues.jboss.org/browse/AS7-2811?page=com.atlassian.jira.plugin.s...
]
Jason Greene closed AS7-2811.
-----------------------------
Resolution: Done
This was already completed
Upgrade to Mojarra 2.1.5 as in Glassfish
----------------------------------------
Key: AS7-2811
URL: https://issues.jboss.org/browse/AS7-2811
Project: Application Server 7
Issue Type: Bug
Components: JSF
Affects Versions: 7.1.0.Beta1
Reporter: Juergen Zimmermann
Assignee: Stan Silvert
Priority: Blocker
Fix For: 7.1.0.CR1
JBoss is currently using 2.1.3. However, at
https://maven.java.net/content/repositories/releases/org/glassfish/javax.... there is
already 2.1.5 as being used in the latest Glassfish release. 2.1.5 also resolves a serious
security issue, as documented here: http://java.net/jira/browse/JAVASERVERFACES-2247
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
5339
days inactive
5353
days old
8 comments
7 participants
participants (7)
-
David Jorm (Commented) (JIRA) -
David Jorm (Updated) (JIRA)
-
Jason Greene (Closed) (JIRA)
-
Juergen Zimmermann (Commented) (JIRA)
-
Juergen Zimmermann (Created) (JIRA)
-
Stan Silvert (Commented) (JIRA)
-
Stan Silvert (Updated) (JIRA)