You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@ofbiz.apache.org by "Jacques Le Roux (Jira)" <ji...@apache.org> on 2021/04/27 19:26:00 UTC

[jira] [Updated] (OFBIZ-12221) Fixed ObjectInputStream denyList [CVE-2021-30128]

     [ https://issues.apache.org/jira/browse/OFBIZ-12221?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jacques Le Roux updated OFBIZ-12221:
------------------------------------
    Summary: Fixed ObjectInputStream denyList [CVE-2021-30128]  (was: Fixed ObjectInputStream denyList)

> Fixed ObjectInputStream denyList [CVE-2021-30128]
> -------------------------------------------------
>
>                 Key: OFBIZ-12221
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12221
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: framework/base
>    Affects Versions: Trunk
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Trivial
>             Fix For: 18.12.01, 17.12.07
>
>
> Prevent generics markup in string type names.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)