java-sig-commits
January 2018
java-sig-commits@lists.fedoraproject.org
- 1 participants
- 321 discussions
[Bug 1465573] CVE-2017-7536 hibernate-validator: Privilege escalation when running under the security manager
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1465573
Bharti Kundal <bkundal(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Flags|needinfo?(bkundal(a)redhat.co |
|m) |
--- Comment #24 from Bharti Kundal <bkundal(a)redhat.com> ---
(In reply to Salvatore Bonaccorso from comment #21)
> Hi
>
> Would it be possible to indicate where the issue was fixed? In Debian we
> ship libhibernate-validator-java and we would like to clarify if/how we are
> affected by the issue. Is there any furher reference?
>
> Thank you already!
>
> Regards,
> Salvatore
Hi Salvatore,
The issue affected all the HV 5.x branches (so 5.2, 5.3, 5.4 are all affected).
6 is not.
It's fixed in the upstream 5.2 branch .The branch is here:
https://github.com/hibernate/hibernate-validator/tree/5.2
Does this help?
Thanks and Regards,
Bharti
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 3 months
- 1
- 0