myfaces-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Romain Manni-Bucau (JIRA)" <...@myfaces.apache.org>
Subject [jira] [Created] (MYFACES-4021) blacklist org.codehaus.groovy.runtime.,org.apache.commons.collections.functors.,org.apache.xalan in MyFacesObjectInputStream
Date Fri, 27 Nov 2015 12:03:10 GMT
Romain Manni-Bucau created MYFACES-4021:
-------------------------------------------

             Summary: blacklist org.codehaus.groovy.runtime.,org.apache.commons.collections.functors.,org.apache.xalan
in  MyFacesObjectInputStream
                 Key: MYFACES-4021
                 URL: https://issues.apache.org/jira/browse/MYFACES-4021
             Project: MyFaces Core
          Issue Type: Bug
            Reporter: Romain Manni-Bucau
            Priority: Blocker


https://github.com/apache/incubator-batchee/commit/cfd133c309c21a82fb24cfcc9a7c2365aee4678a#diff-acd0bc06477ce776b0ad8fdda76f8b7eR56
mecanism can be used

(due to recent vulnerability discovered in [collections], spring, groovy we can't suppose
we don't run with these libraries so we need this fix as well)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message