Liferay EE patches download

[Udaya Kumar Velayudam, modificado hace 11 años.]

Hello All,

I'm using Liferay EE edition 6.1 and looking for a patch to resolve the following issue. Could someone direct me where I can download the patch?

Issue Details:

LIFERAY SECURITY ALERT LPE: LPE-7102
General Information: DOS vulnerability with session clicks
Vulnerability Information: By constructing the right URL and hitting the URL repeatedly, an attacker can cause the server to run out of memory.

Thanks,
Uday

[Mika Koivisto, modificado hace 11 años.]

All EE patches are available in the customer portal.

[Hitoshi Ozawa, modificado hace 11 años.]

In case you need it, there's an instruction on applying a patch in the page below:

http://www.liferay.com/documentation/liferay-portal/6.1/user-guide/-/ai/patching-liferay

[David H Nebinger, modificado hace 11 años.]

EE patches come as fixpacks from the customer portal. There's a tool there to handle the installation of the fixpack downloads.

[Udaya Kumar Velayudam, modificado hace 11 años.]

Thank everyone for your response! I forgot to mention that I have been using the trail version of Liferay EE. Now, I understood that I must be a registered/licensed user to download the patches from customer portal.

[Hitoshi Ozawa, modificado hace 11 años.]

I understood that I must be a registered/licensed user to download the patches from customer portal.

Yes. Is there any reason that you need a patch?

[Udaya Kumar Velayudam, modificado hace 11 años.]

Yes, I want to address the potential issue "server out of memory".

[Hitoshi Ozawa, modificado hace 11 años.]

If you want to evaluate if the patch fixes the issue to your liking, why don't you contact [e-mail] and ask them to provide your a patch?

[Michel Coulon, modificado hace 9 años.]

Udaya Kumar Velayudam:

Thank everyone for your response! I forgot to mention that I have been using the trail version of Liferay EE. Now, I understood that I must be a registered/licensed user to download the patches from customer portal.

Someone has the link of the customer portal ?

Thank you in advance.

[David H Nebinger, modificado hace 9 años.]

After you log in it will be one of the options under your profile picture menu in the upper right corner.

If you don't have the Customer Portal option, your account has not been updated for access.