CST-7131 Libraries with known vulnerabilities

Description

Liferay Portal 7.1 CE GA3 includes the following libraries which have known vulnerabilities:

  • Apache Batik 1.7
  • Apache HttpClient 4.1
  • Apache PDFBox 2.0.9
  • Apache Tika 1.18
  • c3p0 0.9.5.2
  • Ehcache 2.8.3
  • FasterXML Jackson 2.6.7 / 2.8.3 / 2.9.6
  • Google Guava 19.0.20150826 / 21.0
  • Netty 4.0.23
  • Nimbus JOSE + JWT 4.26.1
  • Spring 4.1.9

Severity

Severity 2

Fixed Version(s)

Publication Date: 

June 25, 2019

Found a Bug?

If you have found, or think you have found a bug, help us to help you by letting us know!

Found a Security Vulnerability?

There's a different process available if you have a security issue to report...

Hall of Fame!

Raise your profile - report security vulnerabilities and enter the Hall of Fame!