Bug 1273147 - [GSS] (6.4.z) ISPN-5876 - Pre-commit cache invalidation creates stale cache vulnerability
Summary: [GSS] (6.4.z) ISPN-5876 - Pre-commit cache invalidation creates stale cache v...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: JBoss Enterprise Application Platform 6
Classification: JBoss
Component: Infinispan
Version: 6.1.1
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: CR1
: EAP 6.4.7
Assignee: Enrique Gonzalez Martinez
QA Contact: Martin Simka
URL:
Whiteboard:
Depends On:
Blocks: eap647-payload 1279982 1290879
TreeView+ depends on / blocked
 
Reported: 2015-10-19 18:32 UTC by Stephen Fikes
Modified: 2021-09-09 11:43 UTC (History)
10 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
: 1279982 (view as bug list)
Environment:
Last Closed: 2017-01-17 11:54:31 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker ISPN-5876 0 Major Closed Pre-commit cache invalidation creates stale cache vulnerability 2020-09-10 22:33:56 UTC
Red Hat Knowledge Base (Solution) 729253 0 None None None 2016-03-07 22:09:05 UTC

Description Stephen Fikes 2015-10-19 18:32:51 UTC
Description of problem:
https://issues.jboss.org/browse/ISPN-5876

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 JBoss JIRA Server 2015-10-23 11:24:11 UTC
Galder Zamarreño <galder.zamarreno> updated the status of jira ISPN-5876 to Coding In Progress

Comment 2 Enrique Gonzalez Martinez 2015-10-26 10:06:31 UTC
upstream PR: 
    https://github.com/infinispan/infinispan/pull/3778

6.4.z -> 5.2.x branch backport: 
    https://github.com/infinispan/infinispan/pull/3777

This requires an infinispan upgrade.

Comment 7 Enrique Gonzalez Martinez 2016-02-03 08:53:22 UTC

PR: https://github.com/infinispan/infinispan/pull/3980
no upstream required

Comment 8 Enrique Gonzalez Martinez 2016-02-08 09:29:53 UTC
merged 5.2.x branch infinispan, 6,4,z stream

https://github.com/infinispan/infinispan/commit/ae675c8959356ef9e4dc50d4a64525b8b7159168

Comment 12 Martin Simka 2016-03-15 14:41:49 UTC
verified with EAP 6.4.7.CP.CR2

this fix is enabled by setting system property infinispan.invalidation.on_commit to true

Comment 13 Petr Penicka 2017-01-17 11:54:31 UTC
Retroactively bulk-closing issues from released EAP 6.4 cumulative patches.


Note You need to log in before you can comment on or make changes to this bug.