You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by jl...@apache.org on 2016/02/17 18:37:03 UTC
svn commit: r1730885 - in /ofbiz/branches/release15.12: ./
framework/base/lib/ specialpurpose/cmssite/template/docbook/extensions/
Author: jleroux
Date: Wed Feb 17 17:37:03 2016
New Revision: 1730885
URL: http://svn.apache.org/viewvc?rev=1730885&view=rev
Log:
"Applied fix from trunk for revision: 1730882 "
------------------------------------------------------------------------
r1730882 | jleroux | 2016-02-17 18:29:40 +0100 (mer. 17 févr. 2016) | 10 lignes
In framework/base/lib/ updates Xalan from 2.7.1 to 2.7.2 because of CVE-2014-0107 (was fixed at XALANJ-2435) - https://issues.apache.org/jira/browse/OFBIZ-6905
This implies to update also Xerces from 2.9.1 to 2.11.0 and also xml-apis from 2.9.1 to 1.4.01 (2.9.1 was a wrong version number. It was actually part of the Xerces 2.9.1 package but I was unable to find the real version number then at https://xerces.apache.org/xerces2-j/releases.html)
Also updates Xalan from 27(?) to 2.7.2 in cmssite/template/docbook/extensions. I rendered https://localhost:8443/cmssite/cms/APACHE_OFBIZ_HTML w/o issues
Note: According to the DOM Level 3 specification and DOM Level 2 errata the createElementNS and createAttributeNS methods convert empty string namespaceURI to null.
jleroux: though the tests pass I'm not sure all is covered...
------------------------------------------------------------------------
Added:
ofbiz/branches/release15.12/framework/base/lib/xalan-2.7.2.jar
- copied unchanged from r1730882, ofbiz/trunk/framework/base/lib/xalan-2.7.2.jar
ofbiz/branches/release15.12/framework/base/lib/xercesImpl-2.11.0.jar
- copied unchanged from r1730882, ofbiz/trunk/framework/base/lib/xercesImpl-2.11.0.jar
ofbiz/branches/release15.12/framework/base/lib/xml-apis-1.4.01.jar
- copied unchanged from r1730882, ofbiz/trunk/framework/base/lib/xml-apis-1.4.01.jar
ofbiz/branches/release15.12/specialpurpose/cmssite/template/docbook/extensions/xalan-2.7.2.jar
- copied unchanged from r1730882, ofbiz/trunk/specialpurpose/cmssite/template/docbook/extensions/xalan-2.7.2.jar
Removed:
ofbiz/branches/release15.12/framework/base/lib/xalan-2.7.1.jar
ofbiz/branches/release15.12/framework/base/lib/xercesImpl-2.9.1.jar
ofbiz/branches/release15.12/framework/base/lib/xml-apis-2.9.1.jar
ofbiz/branches/release15.12/specialpurpose/cmssite/template/docbook/extensions/xalan27.jar
Modified:
ofbiz/branches/release15.12/ (props changed)
Propchange: ofbiz/branches/release15.12/
------------------------------------------------------------------------------
--- svn:mergeinfo (original)
+++ svn:mergeinfo Wed Feb 17 17:37:03 2016
@@ -9,4 +9,4 @@
/ofbiz/branches/json-integration-refactoring:1634077-1635900
/ofbiz/branches/multitenant20100310:921280-927264
/ofbiz/branches/release13.07:1547657
-/ofbiz/trunk:1722712,1723007,1723248,1724402,1724411,1724566,1724689,1724763,1724916,1724918,1724925,1724930,1724940,1724943,1724946,1724951,1724957,1724975,1724978,1725006,1725217,1725257,1725561,1725574,1726388,1726486,1726493,1726828,1728398,1728411,1729005,1729078,1729609,1729809,1730035,1730456,1730735-1730736
+/ofbiz/trunk:1722712,1723007,1723248,1724402,1724411,1724566,1724689,1724763,1724916,1724918,1724925,1724930,1724940,1724943,1724946,1724951,1724957,1724975,1724978,1725006,1725217,1725257,1725561,1725574,1726388,1726486,1726493,1726828,1728398,1728411,1729005,1729078,1729609,1729809,1730035,1730456,1730735-1730736,1730882