Liferay EE patches download

[11年前 に Udaya Kumar Velayudam によって更新されました。]

Hello All,

I'm using Liferay EE edition 6.1 and looking for a patch to resolve the following issue. Could someone direct me where I can download the patch?

Issue Details:

LIFERAY SECURITY ALERT LPE: LPE-7102
General Information: DOS vulnerability with session clicks
Vulnerability Information: By constructing the right URL and hitting the URL repeatedly, an attacker can cause the server to run out of memory.

Thanks,
Uday

[11年前 に Mika Koivisto によって更新されました。]

All EE patches are available in the customer portal.

[11年前 に Hitoshi Ozawa によって更新されました。]

In case you need it, there's an instruction on applying a patch in the page below:

http://www.liferay.com/documentation/liferay-portal/6.1/user-guide/-/ai/patching-liferay

[11年前 に David H Nebinger によって更新されました。]

EE patches come as fixpacks from the customer portal. There's a tool there to handle the installation of the fixpack downloads.

[11年前 に Udaya Kumar Velayudam によって更新されました。]

Thank everyone for your response! I forgot to mention that I have been using the trail version of Liferay EE. Now, I understood that I must be a registered/licensed user to download the patches from customer portal.

[11年前 に Hitoshi Ozawa によって更新されました。]

I understood that I must be a registered/licensed user to download the patches from customer portal.

Yes. Is there any reason that you need a patch?

[11年前 に Udaya Kumar Velayudam によって更新されました。]

Yes, I want to address the potential issue "server out of memory".

[11年前 に Hitoshi Ozawa によって更新されました。]

If you want to evaluate if the patch fixes the issue to your liking, why don't you contact [e-mail] and ask them to provide your a patch?

[9年前 に Michel Coulon によって更新されました。]

Udaya Kumar Velayudam:

Thank everyone for your response! I forgot to mention that I have been using the trail version of Liferay EE. Now, I understood that I must be a registered/licensed user to download the patches from customer portal.

Someone has the link of the customer portal ?

Thank you in advance.

[9年前 に David H Nebinger によって更新されました。]

After you log in it will be one of the options under your profile picture menu in the upper right corner.

If you don't have the Customer Portal option, your account has not been updated for access.