Hitoshi Ozawa:
Luis, you're completely missing the point I'm trying to get across. This is a Liferay.com site operated by the company Liferay. Liferay.com is selling Enterprise edition of liferay. One of the major benefit of the Enterprise edition is bug fixes which they provide to their subscription members. If you were a Liferay.com employee, you probably would want people who can not create their own patches buy their Enterprise edition.
And, Enterprise Edition fixed this bug after 2 years and 2 month:
Liferay Portal Security VulnerabilityInitially reported in October 2009 for v.5x, fixed in version 6.1.x (are you sure?); super important security issue.
What about memory leaks introduced in v. 6.x?...
Yes, as a free opensource it is great, although I feel I can reimplement
all Liferay CMS functionality in just aa few month using modern technology such as Wicket, Vaadin, etc.
As a commercial product... two years ago I was working with WebSphere Portal 6.x (initially released in 2006,
Java 1.4) and I was feeling it provides more value and quality
than Liferay Portal 6.x (Java 6!!!) So...
Liferay sucks. Oracle didn't buy it