RE: PDFBox: Java Deserialization

2016-03-05 Thread Gary Grosso
Thank you, Tilman. (And, yes, same exact question.) Gary -Original Message- From: Tilman Hausherr [mailto:thaush...@t-online.de] Sent: Saturday, March 5, 2016 11:54 AM To: users@pdfbox.apache.org Subject: Re: PDFBox: Java Deserialization Am 05.03.2016 um 17:46 schrieb Gary Grosso

Re: PDFBox: Java Deserialization

2016-03-05 Thread Tilman Hausherr
AM To: users@pdfbox.apache.org Subject: Re: PDFBox: Java Deserialization I already answered on January 22. Tilman Am 05.03.2016 um 00:01 schrieb Kiernan, Dan: Good afternoon, our company utilizes the PDFBox software and have been notified by our internal IT staff that there is a potential ris

RE: PDFBox: Java Deserialization

2016-03-05 Thread Gary Grosso
@pdfbox.apache.org Subject: Re: PDFBox: Java Deserialization I already answered on January 22. Tilman Am 05.03.2016 um 00:01 schrieb Kiernan, Dan: > Good afternoon, our company utilizes the PDFBox software and have been > notified by our internal IT staff that there is a potential ri

Re: PDFBox: Java Deserialization

2016-03-04 Thread Tilman Hausherr
I already answered on January 22. Tilman Am 05.03.2016 um 00:01 schrieb Kiernan, Dan: Good afternoon, our company utilizes the PDFBox software and have been notified by our internal IT staff that there is a potential risk for programs developed with Java code, where they deserialize untrusted