https://bugzilla.redhat.com/show_bug.cgi?id=1816332
Anten Skrabec <askrabec(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |dbecker(a)redhat.com,
| |jjoyce(a)redhat.com,
| |jschluet(a)redhat.com,
| |kbasil(a)redhat.com,
| |lhh(a)redhat.com,
| |lpeer(a)redhat.com,
| |mburns(a)redhat.com,
| |mkolesni(a)redhat.com,
| |sclewis(a)redhat.com,
| |scohen(a)redhat.com,
| |slinaber(a)redhat.com
--- Comment #2 from Anten Skrabec <askrabec(a)redhat.com> ---
Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable
jackson-databind. However, OpenDaylight does not expose jackson-databind in a
way that would make it vulnerable, lowering the impact of the vulnerability for
OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at
this time.
--
You are receiving this mail because:
You are on the CC list for the bug.