https://bugzilla.redhat.com/show_bug.cgi?id=1291292
--- Comment #18 from Jason Shepherd <jshepherd(a)redhat.com> ---
Mitigation:
If you do deploy a JMS publisher, and subscriber, and don't trust the messages
sent to you by your clients, you could mitigate this issue by installing a Java
agent which restricts the classes which can be deserialized. This is an article
with the recommended approach:
https://access.redhat.com/solutions/2190911
--
You are receiving this mail because:
You are on the CC list for the bug.