https://bugzilla.redhat.com/show_bug.cgi?id=1548909
Summer Long slong@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1549930, 1549929, 1549928
--- Comment #4 from Summer Long slong@redhat.com --- Created slf4j tracking bugs for this issue:
Affects: fedora-all [bug 1549928]
Created slf4j-jboss-logmanager tracking bugs for this issue:
Affects: fedora-all [bug 1549929]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1549928 [Bug 1549928] slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1549929 [Bug 1549929] slf4j-jboss-logmanager: slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution [fedora-all]