Author: jleroux Revision: 1856457 Modified property: svn:log Modified: svn:log at Fri Sep 13 07:37:21 2019 ------------------------------------------------------------------------------ --- svn:log (original) +++ svn:log Fri Sep 13 07:37:21 2019 @@ -5,6 +5,8 @@ r1856455 | jleroux | 2019-03-28 08:50:32 Improved: Improve ObjectInputStream class (OFBIZ-10837) +Fixes CVE-2019-0189 + The white list was still not complete as reported by Ed Mack This adds all arrays of primitives and java.math.BigDecimal
