https://bugzilla.redhat.com/show_bug.cgi?id=1549276
Richard Maciel Costa <rcosta(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Flags|needinfo?(rcosta(a)redhat.com |
|) |
--- Comment #34 from Richard Maciel Costa <rcosta(a)redhat.com> ---
Hi Yog, hi Yasuhiro.
jackson-databind bundled with candlepin, on SAT 6.2 doesn't even has the
affected class (com.fasterxml.jackson.databind.jsontype.impl.SubTypeValidator),
nor it supports c3pO-related classes.
That said, c3pO-related classes are required to exploit this flaw, thus SAT 6.2
is not affected.
--
You are receiving this mail because:
You are on the CC list for the bug.