|
|
Author: jleroux
Revision: 1855495
Modified property: svn:log
Modified: svn:log at Fri Sep 13 07:40:20 2019
------------------------------------------------------------------------------
--- svn:log (original)
+++ svn:log Fri Sep 13 07:40:20 2019
@@ -5,6 +5,8 @@ r1855492 | jleroux | 2019-03-14 09:28:27
Improved: Improve ObjectInputStream class
(OFBIZ-10837)
+Fixes CVE-2019-0189
+
The white list was still not complete as reported by Wolfgang Rauchholz on user
ML
This adds java.util.Date
@@ -14,4 +16,3 @@ Anyway I'll not change it.
Thanks: Wolfgang Rauchholz
------------------------------------------------------------------------
-
|
Locked
