Service Updates for Liferay Cloud
The services update for 08/20/2024 is a patch update for Backup and Database service.
DXP Cloud Stack
Service Name | Previous Release | Current Release | Docker Images |
Backup |
5.19.0 |
5.19.1 |
liferaycloud/backup:5.19.1 |
CI |
5.2.6 |
5.2.7 |
liferaycloud/jenkins:2.356-jdk8-5.2.7 |
Database |
5.5.1 |
5.5.2 |
liferaycloud/database:5.5.2 |
Liferay |
5.8.0 |
5.8.1 |
liferaycloud/liferay-dxp:7.4-5.8.1 |
Search |
5.3.0 |
5.3.1 |
liferaycloud/elasticsearch:8.13.4-5.3.1 liferaycloud/elasticsearch:7.17.18-5.3.1 |
Webserver |
6.1.0 |
6.1.1 |
liferaycloud/nginx:1.24.0-6.1.1 |
Change Log
Service Name | Service Version | Ticket No. | Description |
Backup |
5.19.1 |
LCD-39983 | Security : Fix Node Vulnerabilities * |
Database | 5.5.2 | LCD-39977 | Security : Update Node and Golang alpine to latest LTS* |
Note :
LCD-39983 Fixes the following vulnerabilities in the Backup service -
- CVE-2023-42282
- CVE-2024-28863
LCD-39977 Fixes critical vulnerability - CVE-2024-24790
As part of this several Medium and High vulnerabilities are resolved as well.
Update Instructions
Note : To take advantage of the new features and fixes provided by the 5.x stack of services, you must update your entire stack to the new 5.x images.
Image Update Instructions
The Liferay Cloud image versions needs to be set inside of the <service>/LCP.json file.
Note, however, that the liferay service uses two image properties. The DXP Cloud image is set in the liferay/LCP.json file, but the liferay/dxp image is set in the gradle.properties. This change was made in order to facilitate easier deployment using the Liferay Cloud CLI.
liferay/LCP.json file would set the liferaycloud/liferay-dxp image:
"image":"liferaycloud/liferay-dxp:7.4-5.X.X"
liferay/gradle.properties file would set the liferay/dxp image:
liferay.workspace.docker.image.liferay=liferay/dxp:2024.q1.1
For all other images, you will just need to update the LCP.json file with the intended image version.
Once the LCP.json files are updated, commit the changes to your Git repository.
git add . && git commit -m "Update dxp cloud stack to XXX"
After pushing these changes to the remote repository, a build will be created in Liferay Cloud and it is ready to deploy.