[jboss-jira] [JBoss JIRA] (AS7-2811) Upgrade to Mojarra 2.1.5 as in Glassfish

[Stan Silvert (Commented) (JIRA)]

    [ https://issues.jboss.org/browse/AS7-2811?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12646729#comment-12646729 ] 

Stan Silvert commented on AS7-2811:
-----------------------------------

You are right.  In case you missed it, I verified with Ed that they did release but haven't yet announced it.  I'll try to get JSF updated before the end of the week.
                
> Upgrade to Mojarra 2.1.5 as in Glassfish
> ----------------------------------------
>
>                 Key: AS7-2811
>                 URL: https://issues.jboss.org/browse/AS7-2811
>             Project: Application Server 7
>          Issue Type: Bug
>          Components: JSF
>    Affects Versions: 7.1.0.Beta1
>            Reporter: Juergen Zimmermann
>            Assignee: Stan Silvert
>            Priority: Blocker
>             Fix For: 7.1.0.CR1
>
>
> JBoss is currently using 2.1.3. However, at https://maven.java.net/content/repositories/releases/org/glassfish/javax.faces there is already 2.1.5 as being used in the latest Glassfish release. 2.1.5 also resolves a serious security issue, as documented here: http://java.net/jira/browse/JAVASERVERFACES-2247

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira