[
https://issues.apache.org/jira/browse/OFBIZ-12167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17307738#comment-17307738
]
sonny brown jr commented on OFBIZ-12167:
----------------------------------------
https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=00200bf
> Adds a blacklist (to be renamed soon to denylist) in Java serialisation
> (CVE-2021-26295)
> ----------------------------------------------------------------------------------------
>
> Key: OFBIZ-12167
> URL: https://issues.apache.org/jira/browse/OFBIZ-12167
> Project: OFBiz
> Issue Type: Sub-task
> Components: framework/base
> Affects Versions: Trunk
> Reporter: Jacques Le Roux
> Assignee: Jacques Le Roux
> Priority: Major
> Fix For: 17.12.06
>
>
> Adds an example based on RMI which is known to be a problem
> This fixes CVE-2021-26295 and is available in last 17.12.06 package
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
