ICEfaces
  1. ICEfaces
  2. ICE-10355

update commons-fileupload library to v1.3.1 for security fix for ice:inputFile

          Details

          • Type: Bug Bug
          • Status: Closed
          • Priority: Major Major
          • Resolution: Fixed
          • Affects Version/s: EE-1.8.2.GA_P07
          • Fix Version/s: EE-1.8.2.GA_P08
          • Component/s: ICE-Components
          • Labels:
            None
          • Environment:
            jsf 1.2 ICEfaces 1.8 file upload

            Description

            Security fix on commons-fileupload-1.2.1 which is bundled with 1.8.2_P03 to P07 has fix in commons-fileupload-1.3.1
            Will test with P07, then back to P03
            pache.org/proper/commons-fileupload/changes-report.html

              Issue Links

              depends on

              Bug - A problem which impairs or prevents the functions of the product. ICE-10023 Fix CVE-2014-0050 DoS with malformed Content-Type header and multipart request processing

              • Major - Major loss of function.
              • Closed

              Improvement - An improvement or enhancement to an existing feature or task. ICE-5912 Remove commons-fileupload.jar from glimmer/lib

              • Major - Major loss of function.
              • Closed

                Activity

                Repository Revision Date User Message
                ICEsoft Public SVN Repository #43837 Thu Dec 18 08:14:14 MST 2014 judy.guglielmin ICE-10355 updated commons-fileupload jar, added its dependent commons-io.jar and modified samples build to include the commons-io.jar
                Files Changed
                Commit graph MODIFY /icefaces/trunk/icefaces/lib/commons-fileupload.jar
                Commit graph ADD /icefaces/trunk/icefaces/lib/commons-io.jar
                Commit graph MODIFY /icefaces/trunk/icefaces/samples/etc/build-common.xml

                  People

                  • Assignee:
                    Judy Guglielmin
                    Reporter:
                    Judy Guglielmin
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    4 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: