Author: jleroux Revision: 1856458 Modified property: svn:log Modified: svn:log at Fri Sep 13 07:40:41 2019 ------------------------------------------------------------------------------ --- svn:log (original) +++ svn:log Fri Sep 13 07:40:41 2019 @@ -5,9 +5,10 @@ r1856455 | jleroux | 2019-03-28 08:50:32 Improved: Improve ObjectInputStream class (OFBIZ-10837) +Fixes CVE-2019-0189 + The white list was still not complete as reported by Ed Mack This adds all arrays of primitives and java.math.BigDecimal Thanks: Ed Mack at OFBIZ-10876 ------------------------------------------------------------------------ -
