" /> Genesys Speechminer and GA JQuery version upgrade - Genesys CTI User Forum

Author Topic: Genesys Speechminer and GA JQuery version upgrade  (Read 976 times)

Offline espancagenesys

  • Newbie
  • *
  • Posts: 6
  • Karma: 0
Genesys Speechminer and GA JQuery version upgrade
« on: October 04, 2023, 09:01:40 PM »
Advertisement
After a pentest, Speechminer and GA JQuery version was detected as vulnerable, heres the currently jQuery versions:
Speech Library JQuery: 3.4.1
Speech Library JQuery-UI: 1.12.1
GA Library YUI: 2.3.0

Need to upgrade the version, as the jQuery is embedded with Speech and GA applications, is there any latest version on Speech and GA with the upgraded jQuery version,

Current speech version is 8.5.5 (8.5.512.324)
Current GA version is 8.1.3 (8.1.309.02)
Java version is 8 Update 261 (8.0.2610.12)

thx in advance
best regards
« Last Edit: October 05, 2023, 05:08:55 PM by espancagenesys »

Offline hsujdik

  • Hero Member
  • *****
  • Posts: 541
  • Karma: 30
Re: Genesys Speechminer JQuery version upgrade
« Reply #1 on: October 05, 2023, 02:05:10 AM »
wow, its been 15 years since I last heard of YUI...

anyway, you have to request genesys to update their libraries on their products through customer care, and wait for their patch... sometimes it takes a couple of weeks, sometimes it takes 6 months...

Offline Kubig

  • Hero Member
  • *****
  • Posts: 2755
  • Karma: 44
Re: Genesys Speechminer JQuery version upgrade
« Reply #2 on: October 05, 2023, 01:04:08 PM »
Are you talking about Pulse or Speechminer? You mentioned both :) Regarding SW updates I would strongly recommend to check available release notes where you can find such information

Offline espancagenesys

  • Newbie
  • *
  • Posts: 6
  • Karma: 0
Re: Genesys Speechminer JQuery version upgrade
« Reply #3 on: October 05, 2023, 02:13:36 PM »
[quote author=hsujdik link=topic=12465.msg55412#msg55412 date=1696471510]
wow, its been 15 years since I last heard of YUI...

anyway, you have to request genesys to update their libraries on their products through customer care, and wait for their patch... sometimes it takes a couple of weeks, sometimes it takes 6 months...
[/quote]

Thx!!

Im gonna check!

[quote author=Kubig link=topic=12465.msg55413#msg55413 date=1696511048]
Are you talking about Pulse or Speechminer? You mentioned both :) Regarding SW updates I would strongly recommend to check available release notes where you can find such information
[/quote]

Im talking about speechminer and GA, sorry for the confusion. Just corrected the topic.

And well, i found the release here:
https://docs.genesys.com/Documentation/RN
and here:
https://docs.genesys.com/Documentation/RN/8.5.x/web-svr-apps85rn/web-svr-apps85rn

Also here:
https://docs.genesys.com/Documentation/RN/Closed/spmi-sptxtan85rn/spmi-sptxtan85rn

where the 8.5.202.97 (https://docs.genesys.com/Documentation/RN/8.5.x/web-svr-apps85rn/web-svr-apps8520297) seems to be the newest version and its from nov 2022, wich the jQuery library has been upgraded to v3.5.1 for enhanced security. (HTCC-31573). So theres no other updates avaiable.

Also, I found here a doc:
https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwiEio21_96BAxWqqZUCHaokBJgQFnoECAsQAQ&url=https%3A%2F%2Fdocs.genesys.com%2FDocumentation%2FGWC%2Flatest%2FLibrary%2FReadMeDraft%3Faction%3Dpdfpage&usg=AOvVaw31Sw6REDs6GeD6S_aOn9uK&opi=89978449

There mentions the https://jquery.com, and searching on the website I found more information about the last versions; indeed we are out of the updates.

Seems theres nothing to do about it. So sad.

Anyway, as [b]hsujdik[/b] suggested, im gonna ask the Customer Care for a possible update.

Thx guys.
« Last Edit: October 05, 2023, 05:05:09 PM by espancagenesys »