Liferay EE patches download

[Udaya Kumar Velayudam，修改在11 年前。]

Hello All,

I'm using Liferay EE edition 6.1 and looking for a patch to resolve the following issue. Could someone direct me where I can download the patch?

Issue Details:

LIFERAY SECURITY ALERT LPE: LPE-7102
General Information: DOS vulnerability with session clicks
Vulnerability Information: By constructing the right URL and hitting the URL repeatedly, an attacker can cause the server to run out of memory.

Thanks,
Uday

[Mika Koivisto，修改在11 年前。]

All EE patches are available in the customer portal.

[Hitoshi Ozawa，修改在11 年前。]

In case you need it, there's an instruction on applying a patch in the page below:

http://www.liferay.com/documentation/liferay-portal/6.1/user-guide/-/ai/patching-liferay

[David H Nebinger，修改在11 年前。]

EE patches come as fixpacks from the customer portal. There's a tool there to handle the installation of the fixpack downloads.

[Udaya Kumar Velayudam，修改在11 年前。]

Thank everyone for your response! I forgot to mention that I have been using the trail version of Liferay EE. Now, I understood that I must be a registered/licensed user to download the patches from customer portal.

[Hitoshi Ozawa，修改在11 年前。]

I understood that I must be a registered/licensed user to download the patches from customer portal.

Yes. Is there any reason that you need a patch?

[Udaya Kumar Velayudam，修改在11 年前。]

Yes, I want to address the potential issue "server out of memory".

[Hitoshi Ozawa，修改在11 年前。]

If you want to evaluate if the patch fixes the issue to your liking, why don't you contact [e-mail] and ask them to provide your a patch?

[Michel Coulon，修改在9 年前。]

Udaya Kumar Velayudam:

Thank everyone for your response! I forgot to mention that I have been using the trail version of Liferay EE. Now, I understood that I must be a registered/licensed user to download the patches from customer portal.

Someone has the link of the customer portal ?

Thank you in advance.

[David H Nebinger，修改在9 年前。]

After you log in it will be one of the options under your profile picture menu in the upper right corner.

If you don't have the Customer Portal option, your account has not been updated for access.