[ https://issues.apache.org/jira/browse/AMQ-7399?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jean-Baptiste Onofré resolved AMQ-7399. --------------------------------------- Resolution: Fixed > SERIALIZABLE_PACKAGES should exclude java* by default > ----------------------------------------------------- > > Key: AMQ-7399 > URL: https://issues.apache.org/jira/browse/AMQ-7399 > Project: ActiveMQ > Issue Type: Bug > Components: Broker > Affects Versions: 5.15.10, 5.15.11 > Reporter: Jean-Baptiste Onofré > Assignee: Jean-Baptiste Onofré > Priority: Major > Fix For: 5.16.0, 5.15.12 > > Time Spent: 1h > Remaining Estimate: 0h > > To avoid potential security issue when using {{ObjectMessage}}, > {{SERIALIZABLE_PACKAGE}} should be limited by default. Now, it contains > {{java.lang, ...}} -- This message was sent by Atlassian Jira (v8.3.4#803005)