[jboss-jira] [JBoss JIRA] (AS7-2811) Upgrade to Mojarra 2.1.5 as in Glassfish

[David Jorm (Commented) (JIRA)]

    [ https://issues.jboss.org/browse/AS7-2811?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12646168#comment-12646168 ] 

David Jorm commented on AS7-2811:
---------------------------------

http://java.net/jira/browse/JAVASERVERFACES-2247 is now fixed in 2.1.5. I have verified that the fix resolves the flaw. Please go ahead with this upgrade ASAP, as the security issue is of a high severity.
                
> Upgrade to Mojarra 2.1.5 as in Glassfish
> ----------------------------------------
>
>                 Key: AS7-2811
>                 URL: https://issues.jboss.org/browse/AS7-2811
>             Project: Application Server 7
>          Issue Type: Bug
>          Components: JSF
>    Affects Versions: 7.1.0.Beta1
>            Reporter: Juergen Zimmermann
>            Assignee: Stan Silvert
>
> JBoss is currently using 2.1.3. However, at https://maven.java.net/content/repositories/releases/org/glassfish/javax.faces there is already 2.1.5 as being used in the latest Glassfish release.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira