https://bugzilla.redhat.com/show_bug.cgi?id=1909269
--- Comment #4 from Summer Long <slong(a)redhat.com> ---
Statement:
The following Red Hat products do ship the vulnerable component, but do not
enable the unsafe conditions needed to exploit, lowering their vulnerability
impact:
* JBoss Data Grid 7
* Business Process Management Suite 6
* Business Rules Management Suite 6
* JBoss Data Virtualization 6
* Red Hat Fuse Service Works 6
* Red Hat OpenStack Platform
These products may update the jackson-databind dependency in a future release.
--
You are receiving this mail because:
You are on the CC list for the bug.