Liferay Security patches june 2020Liferay Security patches june 2020https://liferay.dev/en/c/message_boards/find_thread?p_l_id=119785333&threadId=1193535432024-03-28T21:50:37Z2024-03-28T21:50:37ZRE: Liferay Security patches june 2020marvin roshttps://liferay.dev/en/c/message_boards/find_message?p_l_id=119785333&messageId=1193834842020-06-12T14:09:25Z2020-06-12T14:09:25ZYeah, I found it exactly when you answered <img alt="emoticon" src="@theme_images_path@/emoticons/happy.gif" ><br />Thanks for your help!! It helped me a lot!marvin ros2020-06-12T14:09:25ZRE: Liferay Security patches june 2020marvin roshttps://liferay.dev/en/c/message_boards/find_message?p_l_id=119785333&messageId=1193791502020-06-12T14:06:12Z2020-06-12T14:06:12ZHey Dominik,<br />I found it. Its from the march2020 patch.<br />Thank you so much!marvin ros2020-06-12T14:06:12ZRE: Liferay Security patches june 2020Dominik Markshttps://liferay.dev/en/c/message_boards/find_message?p_l_id=119785333&messageId=1193808512020-06-12T14:05:50Z2020-06-12T14:05:50ZI see one change in the file modules/core/portal-bootstrap/system.packages.extra.bnd (<a href="https://github.com/liferay/liferay-portal/compare/7.1.3-ga4...community-security-team:7.1.3-cumulative#diff-1ddc6d876981e1ae7df98e0d14fddd4e">https://github.com/liferay/liferay-portal/compare/7.1.3-ga4...community-security-team:7.1.3-cumulative#diff-1ddc6d876981e1ae7df98e0d14fddd4e</a>).<br /><br />The portal-bootstrap.jar exports packages from the bundle 0 (the "system" bundle). So actually the change defines the versions of the exported packages of "org.apache.beanutils.*". Dominik Marks2020-06-12T14:05:50ZRE: Liferay Security patches june 2020marvin roshttps://liferay.dev/en/c/message_boards/find_message?p_l_id=119785333&messageId=1193788112020-06-12T13:44:48Z2020-06-12T13:44:48ZHi Dominik,<br /><br />thank you for your reply<br />I compared my binary files to yours and I have the same files as you except:<br /><br />\bundles\osgi\core\<strong>com.liferay.portal.bootstrap.jar</strong><br /><strong></strong>I didn't came across this .jar while looking through the commit on github. What have I missed? <br />Can you show me where I can see that I'll need this file too? <br /><br />with kind regardsmarvin ros2020-06-12T13:44:48ZRE: Liferay Security patches june 2020Dominik Markshttps://liferay.dev/en/c/message_boards/find_message?p_l_id=119785333&messageId=1193798092020-06-12T12:53:16Z2020-06-12T12:53:16ZHello marvin ros,<br /><br />I just created a binary patch for Liferay 7.1.3 GA4. <br /><br />Feel free to test it: <a href="https://nextcloud.convotis.com/s/JSnQtJTB5e23psj">https://nextcloud.convotis.com/s/JSnQtJTB5e23psj</a><br />Be sure to have a look at my notes on by blog post (e.g. clear osgi/state and other folders etc.)Dominik Marks2020-06-12T12:53:16ZRE: Liferay Security patches june 2020marvin roshttps://liferay.dev/en/c/message_boards/find_message?p_l_id=119785333&messageId=1193686952020-06-11T08:58:02Z2020-06-11T08:58:02ZHey Dominik,<br />I think I have a correct compiled version but how do I get a collection of the JAR and JSP/JSPF files that I have to replace like you did in your tutorial?<br /><br />Now I have a whole bundles folder with all new generated files and a lot of more JAR files than I have in my liferay 7.1 installation. How do I get a clean list of the files that I have to replace in which directory in my current installation to apply the patch on this installation.<br /><br />I also have noticed that in my compiled bundles folder the marketplace/override folder is now empty. Is this correct?<br /><br />So I am again a little bit confused and lost how I get to the result you listed in you tutorial.<br /><br />Can you help me out?<br />Your help would be much appreciatedmarvin ros2020-06-11T08:58:02ZRE: Liferay Security patches june 2020marvin roshttps://liferay.dev/en/c/message_boards/find_message?p_l_id=119785333&messageId=1193651502020-06-11T05:13:24Z2020-06-11T05:13:24ZHello Dominik Marks,<br /><br />thank you very much for your answer!<br />I will look into it and try to do it like you did in this tutorial now.<br /><br />> <em>I will try to create new binary patches from the latest Patches for June 2020, but don't know yet when I will have time for that.</em><br /><em></em><br /><em></em>This would be great, can you notify me if you have done this? <br />I will try to do it on my own now but I would like to compare my version to yours after you have done it because I am very unsure after the process if it is really right.marvin ros2020-06-11T05:13:24ZRE: Liferay Security patches june 2020Dominik Markshttps://liferay.dev/en/c/message_boards/find_message?p_l_id=119785333&messageId=1193623992020-06-10T13:20:14Z2020-06-10T13:20:14ZHello marvin ros,<br /><br />here is my tutorial on how to build binary patches: <a href="https://liferay.dev/blogs/-/blogs/creating-liferay-security-binary-patches">https://liferay.dev/blogs/-/blogs/creating-liferay-security-binary-patches<br /><br /></a>I will try to create new binary patches from the latest Patches for June 2020, but don't know yet when I will have time for that.Dominik Marks2020-06-10T13:20:14ZLiferay Security patches june 2020marvin roshttps://liferay.dev/en/c/message_boards/find_message?p_l_id=119785333&messageId=1193535422020-06-10T06:35:31Z2020-06-10T06:35:31ZHello together,<br />today I have seen that there are new security patches for Liferay CE 7.1 and 7.2 in this blogpost: <br /><a href="https://liferay.dev/blogs/-/blogs/june-2020-security-patches-for-liferay-portal-7-1-and-7-2">https://liferay.dev/blogs/-/blogs/june-2020-security-patches-for-liferay-portal-7-1-and-7-2</a><br />Well, the last time there was a security patch for these versions I tried to compile the patch by myself to get a binary patch but without any luck and satisfactory result.<br />At some point I was able to apply the patch and compile the patched version but I couldnt figure out if the patch was really applied because nowhere in the liferay startup log and liferay backend the version number changed to the new pa