ICEfaces
  1. ICEfaces
  2. ICE-11498

Update 3rd party libraries and build scripts for the EE 3.3 P08 release

    Details

    • Type: Bug Bug
    • Status: Resolved
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: EE-3.3.0.GA_P07
    • Fix Version/s: EE-3.3.0.GA_P08
    • Component/s: Release
    • Labels:
      None
    • Environment:
      Any

      Description

      Based on the work done for ICE-11468, some libraries need to be updated to avoid the security vulnerabilities they have, as reported by the customer in that JIRA. This JIRA is to determine which of those libraries need to be updated in the EE 3.3 codebase and to update them.

      This JIRA is also to update the Mojarra and MyFaces jars to the newest 2.1 builds and to update the Maven pom files with the new release version and with other necessary corrections.

        Activity

        Hide
        Arturo Zambrano added a comment -

        r53235: Updated libraries that had vulnerabilities and also updated the Mojarra and MyFaces jars to the newest 2.1 builds; Fixed OutOfMemory issue when building the ACE javadocs

        Show
        Arturo Zambrano added a comment - r53235: Updated libraries that had vulnerabilities and also updated the Mojarra and MyFaces jars to the newest 2.1 builds; Fixed OutOfMemory issue when building the ACE javadocs
        Hide
        Arturo Zambrano added a comment -

        Updated Apache POI to version 4.2.1 (was 3.7).
        Added Commons Math version 3.6.1 (dependency of new POI version).
        Updated Mojarra JSF to version/build 2.1.29-11 (was javax.faces-2.1.29-04).
        Updated MyFaces to version 2.1.18 (was 2.1.7).
        Updated Commons BeanUtils to version 1.9.4 (was 1.8.3).
        Updated Commons Logging to version 1.2 (was 1.1.1).

        Show
        Arturo Zambrano added a comment - Updated Apache POI to version 4.2.1 (was 3.7). Added Commons Math version 3.6.1 (dependency of new POI version). Updated Mojarra JSF to version/build 2.1.29-11 (was javax.faces-2.1.29-04). Updated MyFaces to version 2.1.18 (was 2.1.7). Updated Commons BeanUtils to version 1.9.4 (was 1.8.3). Updated Commons Logging to version 1.2 (was 1.1.1).
        Hide
        Arturo Zambrano added a comment -

        r53236, r58377: Updated maven pom files to use the 3.3.0.GA_P08 version and the https protocol and made other corrections as necessary

        Show
        Arturo Zambrano added a comment - r53236, r58377: Updated maven pom files to use the 3.3.0.GA_P08 version and the https protocol and made other corrections as necessary
        Hide
        Arturo Zambrano added a comment -

        r58470: Added default web.xml to eps poll application, so it can be built with maven

        r53239: Corrected liferay faces version, so that the dependency can be located by maven and the chat portlet app can be built correctly

        Show
        Arturo Zambrano added a comment - r58470: Added default web.xml to eps poll application, so it can be built with maven r53239: Corrected liferay faces version, so that the dependency can be located by maven and the chat portlet app can be built correctly
        Hide
        Arturo Zambrano added a comment -

        r53261: Reverted poi library update due to build issues; remove math3 library since it's not needed by our old poi library; updated version licenses file (EE 3.3 maintenance branch and P08 tag).

        Show
        Arturo Zambrano added a comment - r53261: Reverted poi library update due to build issues; remove math3 library since it's not needed by our old poi library; updated version licenses file (EE 3.3 maintenance branch and P08 tag).

          People

          • Assignee:
            Arturo Zambrano
            Reporter:
            Arturo Zambrano
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: