[jboss-cvs] JBossAS SVN: r95577 - branches/JBPAPP_4_2_0_GA_CP/build.

[jboss-cvs-commits at lists.jboss.org]

Author: mbenitez
Date: 2009-10-26 15:56:58 -0400 (Mon, 26 Oct 2009)
New Revision: 95577

Modified:
   branches/JBPAPP_4_2_0_GA_CP/build/build-thirdparty.xml
Log:
JBPAPP-2815 Update JBoss Remoting to 2.2.3_SP1 and JBPAPP-2919 CVE-2009-2625 xerces-j2 Denial of Service vulnerability

Modified: branches/JBPAPP_4_2_0_GA_CP/build/build-thirdparty.xml
===================================================================
--- branches/JBPAPP_4_2_0_GA_CP/build/build-thirdparty.xml	2009-10-26 17:55:02 UTC (rev 95576)
+++ branches/JBPAPP_4_2_0_GA_CP/build/build-thirdparty.xml	2009-10-26 19:56:58 UTC (rev 95577)
@@ -79,7 +79,7 @@
     <componentref name="apache-slide" version="2.1.jdk15-brew"/>
     <componentref name="apache-velocity" version="1.4jboss-brew"/>
     <componentref name="apache-xalan" version="2.7.0.patch02-brew"/>
-    <componentref name="apache-xerces" version="2.7.1.patch01-brew"/>
+    <componentref name="apache-xerces" version="2.7.1.patch02-brew"/>
     <componentref name="apache-xmlsec" version="1.3.0-brew"/>
     <componentref name="cglib" version="2.1.3dep-brew"/>
     <componentref name="beanshell" version="1.3.0-brew"/>
@@ -108,7 +108,7 @@
     <!-- Note: JBossRemoting is the strongest dependency from JBoss Messaging,
                Aways inform the JBoss Messaging team when this version is updated,
                as that requires a full testsuite run from the JBM team -->
-    <componentref name="jboss/remoting" version="2.2.3-brew"/>
+    <componentref name="jboss/remoting" version="2.2.3.SP1-brew"/>
     <componentref name="jboss/serialization" version="1.0.3.GA-brew"/>
     <componentref name="jboss/jboss-vfs" version="1.0.0.GA-brew"/>
     <componentref name="jboss/web" version="2.0.0.GA_CP11-brew"/>