https://bugzilla.redhat.com/show_bug.cgi?id=1887664
--- Comment #36 from Jonathan Christison <jochrist(a)redhat.com> ---
Marking Red Hat Jboss AMQ 6 as having a moderate impact, although AMQ 6
distribute affected versions of jackson-databind, its use in both AMQ 6 and as
earlier noted, Fuse 6, is not susceptible to the vulnerability as there is
nothing that deserializes XML from JSON in such a way that the underlying
DOMDeserializer is implicitly used.
This vulnerability is out of security support scope for the following
products:
* Red Hat JBoss AMQ 6
Please refer to
https://access.redhat.com/support/policy/updates/jboss_notes
for more details.
--
You are receiving this mail because:
You are on the CC list for the bug.