The issue remains a general problem in usages of ObjectInputStream, which should still filter at least known vulnerable classes.
Andy. -- Andy Gumbrecht https://twitter.com/AndyGeeDe http://www.tomitribe.com
In order to provide users with the Apache Commons Collections 3.2.2
critical security fix this vote is cancelled.
- [VOTE][CANCELLED] staging-1071 - tomee-1.7.3 Andy Gumbrecht
- Re: [VOTE][CANCELLED] staging-1071 - tomee-1.7.3 Romain Manni-Bucau
