|
Author: jleroux
Revision: 1866834
Modified property: svn:log
Modified: svn:log at Fri Sep 13 07:30:24 2019
------------------------------------------------------------------------------
--- svn:log (original)
+++ svn:log Fri Sep 13 07:30:24 2019
@@ -1,6 +1,8 @@
Improved: Improve ObjectInputStream class
(OFBIZ-10837)
+Fixes CVE-2019-0189
+
Allows users to easily override the list of accepted objects by using the
listOfSafeObjectsForInputStream property
|