You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by jl...@apache.org on 2019/09/13 07:41:02 UTC
svn propchange: r1856487 - svn:log
Author: jleroux
Revision: 1856487
Modified property: svn:log
Modified: svn:log at Fri Sep 13 07:41:02 2019
------------------------------------------------------------------------------
--- svn:log (original)
+++ svn:log Fri Sep 13 07:41:02 2019
@@ -5,6 +5,8 @@ r1856484 | jleroux | 2019-03-28 16:36:13
Improved: Improve ObjectInputStream class
(OFBIZ-10837)
+Fixes CVE-2019-0189
+
The white list was still not complete as reported by Ed Mack
This adds
org.apache.ofbiz.widget.model.ModelTheme
@@ -16,4 +18,3 @@ java.util.TimeZonz
Thanks: Ed Mack at OFBIZ-10876
------------------------------------------------------------------------
-