Message Boards

liferay 6.0.6 : libraries versions

thumbnail
Marco Ferretti, modified 7 Years ago.

liferay 6.0.6 : libraries versions

Regular Member Posts: 100 Join Date: 10/4/10 Recent Posts
Hi all,

I have an odd question for the LF community. We have a liferay 6.0.6CE instance that will (hopefully) be migrated later this year; in the meantime we got aware of this struts2 vulnerability and were wondering if our instance is affected.
I tried looking inside the WEB-INF/lin/struts.jar but the MANIFEST file is not there and googling for "liferay 6.0.6 struts version" or "liferay 6.0.6 libraries version" did not lead to any result ... hence my question : does anybody know any of the following :
  • where can I find the list of the libraries and their version for lifeary 6.0.6?
  • is liferay 6.0.6 affected by the above mentioned CVE ?



Thanks in advance for any help

Marco
thumbnail
David H Nebinger, modified 7 Years ago.

RE: liferay 6.0.6 : libraries versions (Answer)

Liferay Legend Posts: 14914 Join Date: 9/2/06 Recent Posts
It is there but you are not vulnerable.

Liferay never took advantage of that part of struts that introduced the vulnerability.

Unless you are looking for that info to be the lever to get your upgrade done, then yes you are vulnerable and you should upgrade sooner rather than later.

emoticon
thumbnail
Marco Ferretti, modified 7 Years ago.

RE: liferay 6.0.6 : libraries versions

Regular Member Posts: 100 Join Date: 10/4/10 Recent Posts
Thanks for the (reassuring) answer, it really makes me happy as I was assigned another (critical) task and would have had to clone myself if I had to rush (also) this migration.
thumbnail
Olaf Kock, modified 7 Years ago.

RE: liferay 6.0.6 : libraries versions (Answer)

Liferay Legend Posts: 6396 Join Date: 9/23/08 Recent Posts
Marco Ferretti:
where can I find the list of the libraries and their version for lifeary 6.0.6?


license/versions.html in my current bundle. I believe that it's been always in but might have been moved around.
thumbnail
Marco Ferretti, modified 7 Years ago.

RE: liferay 6.0.6 : libraries versions

Regular Member Posts: 100 Join Date: 10/4/10 Recent Posts
Thanks, it's exactly there !