java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 422 discussions
[Bug 1725796] New: CVE-2019-12814 jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafter JSON message. [fedora-all]
by bugzilla@redhat.com
4 years, 9 months
[Bug 1725808] New: CVE-2019-12384 jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution [fedora-all]
by bugzilla@redhat.com
4 years, 9 months
[Bug 1709643] New: woodstox-core-5.2.1 is available
by bugzilla@redhat.com
4 years, 9 months
[Bug 1718639] New: maven-doxia-sitetools-1.9 is available
by bugzilla@redhat.com
4 years, 9 months
[Bug 1716226] New: maven-doxia-1.9 is available
by bugzilla@redhat.com
4 years, 9 months
[Bug 1699742] New: CVE-2019-0228 pdfbox: XML External Entity (XXE) attacks via a crafted XFDF [fedora-all]
by bugzilla@redhat.com
4 years, 9 months
[Bug 1720940] New: maven-wagon-3.3.3 is available
by bugzilla@redhat.com
4 years, 9 months
[Bug 1710266] New: plexus-components-pom-2.0.0 is available
by bugzilla@redhat.com
4 years, 9 months
[Bug 1694660] New: xbean-4.13 is available
by bugzilla@redhat.com
4 years, 9 months
[Bug 1711692] New: maven-source-plugin-3.1.0 is available
by bugzilla@redhat.com
4 years, 9 months
Results per page: