You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@ofbiz.apache.org by jl...@apache.org on 2019/09/13 07:37:21 UTC

svn propchange: r1856457 - svn:log

Author: jleroux
Revision: 1856457
Modified property: svn:log

Modified: svn:log at Fri Sep 13 07:37:21 2019
------------------------------------------------------------------------------
--- svn:log (original)
+++ svn:log Fri Sep 13 07:37:21 2019
@@ -5,6 +5,8 @@ r1856455 | jleroux | 2019-03-28 08:50:32
 Improved: Improve ObjectInputStream class
 (OFBIZ-10837)
 
+Fixes CVE-2019-0189
+
 The white list was still not complete as reported by Ed Mack
 This adds all arrays of primitives and java.math.BigDecimal