ICEfaces
  1. ICEfaces
  2. ICE-10355

update commons-fileupload library to v1.3.1 for security fix for ice:inputFile

          Details

          • Type: Bug Bug
          • Status: Closed
          • Priority: Major Major
          • Resolution: Fixed
          • Affects Version/s: EE-1.8.2.GA_P07
          • Fix Version/s: EE-1.8.2.GA_P08
          • Component/s: ICE-Components
          • Labels:
            None
          • Environment:
            jsf 1.2 ICEfaces 1.8 file upload

            Description

            Security fix on commons-fileupload-1.2.1 which is bundled with 1.8.2_P03 to P07 has fix in commons-fileupload-1.3.1
            Will test with P07, then back to P03
            pache.org/proper/commons-fileupload/changes-report.html

              Issue Links

              depends on

              Bug - A problem which impairs or prevents the functions of the product. ICE-10023 Fix CVE-2014-0050 DoS with malformed Content-Type header and multipart request processing

              • Major - Major loss of function.
              • Closed

              Improvement - An improvement or enhancement to an existing feature or task. ICE-5912 Remove commons-fileupload.jar from glimmer/lib

              • Major - Major loss of function.
              • Closed

                Activity

                Descending order - Click to sort in ascending order
                Ken Fyten made changes -
                Status Resolved [ 5 ] Closed [ 6 ]
                Ken Fyten made changes -
                Status Reopened [ 4 ] Resolved [ 5 ]
                Resolution Fixed [ 1 ]
                Ken Fyten made changes -
                Resolution Fixed [ 1 ]
                Status Resolved [ 5 ] Reopened [ 4 ]
                Assignee Priority P1 [ 10010 ] P2 [ 10011 ]
                Judy Guglielmin made changes -
                Status Open [ 1 ] Resolved [ 5 ]
                Resolution Fixed [ 1 ]
                Ken Fyten made changes -
                Assignee Priority P1 [ 10010 ]
                Ken Fyten made changes -
                Assignee Judy Guglielmin [ judy.guglielmin ]
                Ken Fyten made changes -
                Fix Version/s EE-1.8.2.GA_P08 [ 11178 ]
                Judy Guglielmin made changes -
                Link This issue depends on ICE-10023 [ ICE-10023 ]
                Judy Guglielmin made changes -
                Link This issue depends on ICE-5912 [ ICE-5912 ]
                Judy Guglielmin made changes -
                Environment jsf 1.2 ICEfaces 1.8 fileupload jsf 1.2 ICEfaces 1.8 file upload
                Judy Guglielmin made changes -
                Field Original Value New Value
                Attachment fileInput.png [ 17538 ]
                Judy Guglielmin created issue -

                  People

                  • Assignee:
                    Judy Guglielmin
                    Reporter:
                    Judy Guglielmin
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    4 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: