Message Boards

Binary Patch - "Core Files"

thumbnail
Fredi B, modified 3 Years ago.

Binary Patch - "Core Files"

Junior Member Posts: 69 Join Date: 4/1/20 Recent Posts
Hey Liferay-Community,
with the help of Dominik Marks Guide ( https://liferay.dev/blogs/-/blogs/creating-liferay-security-binary-patches ) I successfully compiled the June Security Patch for Liferay Portal CE 7.1 GA4.

Like Dominik I am only interested in the files relevant for "a normal Liferay bundle" and not in changes to third-party-modules.
Are the relevant files the same?
Me - as liferay newcomer - have not the insight to decide what files of the liferay bundle are affected by this patch.
Help would be appreciated.

Fredi
thumbnail
Dominik Marks, modified 3 Years ago.

RE: Binary Patch - "Core Files"

Regular Member Posts: 149 Join Date: 8/29/12 Recent Posts
To create "my" patches I looked at which modules have been changed in the github patches. After that I searched for each those module if they are present in a normal Liferay bundle.

I didn't look into the latest patches for June 2020, but I assume that probably other modules have been changed, too. So the list of affected modules may be different.
thumbnail
Fredi B, modified 3 Years ago.

RE: Binary Patch - "Core Files"

Junior Member Posts: 69 Join Date: 4/1/20 Recent Posts
Thanks Dominik,
I will try to follow your advise tomorrow.
Me and I guess many other "newer-to-Liferay-People" would be really thankful for a List or maybe later also an as well written guide like the last one you did for the security-patch in march.
I'll make sure to thank you in person if we'll meet us on a (my first) Liferay-Event after this Corona Pandemic and will gladly invite you on some beers. 
Cheers,
Fredi

Edit: 
​​​​​​​When looking at the git compare provided by Liferay ( https://github.com/community-security-team/liferay-portal/compare/7.1.3-ga4...7.1.3-cumulative.patch ) I have problems to determine which JAR-File has changed.
Is there a way to make this process easier or see the complete paths (or  maybe even see the changes sorted module by module)?
thumbnail
Dominik Marks, modified 3 Years ago.

RE: Binary Patch - "Core Files"

Regular Member Posts: 149 Join Date: 8/29/12 Recent Posts
Hello Fredi B.,
you can always open a more graphical overview of a patch by removing the ".patch" at the end of the link.

So to view a graphical overview for the latest 7.1.3 patch see here: https://github.com/liferay/liferay-portal/compare/7.1.3-ga4...community-security-team:7.1.3-cumulative