Liferay EE patches download

[Udaya Kumar Velayudam, geändert vor 11 Jahren.]

Hello All,

I'm using Liferay EE edition 6.1 and looking for a patch to resolve the following issue. Could someone direct me where I can download the patch?

Issue Details:

LIFERAY SECURITY ALERT LPE: LPE-7102
General Information: DOS vulnerability with session clicks
Vulnerability Information: By constructing the right URL and hitting the URL repeatedly, an attacker can cause the server to run out of memory.

Thanks,
Uday

[Mika Koivisto, geändert vor 11 Jahren.]

All EE patches are available in the customer portal.

[Hitoshi Ozawa, geändert vor 11 Jahren.]

In case you need it, there's an instruction on applying a patch in the page below:

http://www.liferay.com/documentation/liferay-portal/6.1/user-guide/-/ai/patching-liferay

[David H Nebinger, geändert vor 11 Jahren.]

EE patches come as fixpacks from the customer portal. There's a tool there to handle the installation of the fixpack downloads.

[Udaya Kumar Velayudam, geändert vor 11 Jahren.]

Thank everyone for your response! I forgot to mention that I have been using the trail version of Liferay EE. Now, I understood that I must be a registered/licensed user to download the patches from customer portal.

[Hitoshi Ozawa, geändert vor 11 Jahren.]

I understood that I must be a registered/licensed user to download the patches from customer portal.

Yes. Is there any reason that you need a patch?

[Udaya Kumar Velayudam, geändert vor 11 Jahren.]

Yes, I want to address the potential issue "server out of memory".

[Hitoshi Ozawa, geändert vor 11 Jahren.]

If you want to evaluate if the patch fixes the issue to your liking, why don't you contact [e-mail] and ask them to provide your a patch?

[Michel Coulon, geändert vor 9 Jahren.]

Udaya Kumar Velayudam:

Thank everyone for your response! I forgot to mention that I have been using the trail version of Liferay EE. Now, I understood that I must be a registered/licensed user to download the patches from customer portal.

Someone has the link of the customer portal ?

Thank you in advance.

[David H Nebinger, geändert vor 9 Jahren.]

After you log in it will be one of the options under your profile picture menu in the upper right corner.

If you don't have the Customer Portal option, your account has not been updated for access.