Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-13112

Upgrade to Richfaces 3.3.1.GA-NX9.01

    XMLWordPrintable

    Details

      Description

      JBoss RichFaces has a known flaw related to deserialization:

      https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2165

      3.3.1.GA-NX10 will the patch that correct the flaw.

        Attachments

          Issue Links

          depends on

          Bug - A problem which impairs or prevents the functions of the product. VEND-3 Correct JBoss Richfaces CVE-2013-4521 flaw

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: