[java-sig-commits] [Bug 1819209] CVE-2020-10968 jackson-databind: serialization gadgets in bus-proxy [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1819209
Alex Scheel <ascheel(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
CC| |ascheel(a)redhat.com
Resolution|--- |CURRENTRELEASE
Last Closed| |2020-03-31 13:59:23
--- Comment #2 from Alex Scheel <ascheel(a)redhat.com> ---
Fedora Rawhide currently ships 2.10.3. Fedora 30+ ship at least 2.10.0. Per
parent bug, 2.9.10.4 was affected, but 2.10.0 isn't (matches what upstream is
saying); marking as CLOSED->CURRENTRELEASE.
--
You are receiving this mail because:
You are on the CC list for the bug.