java-sig-commits January 2018

java-sig-commits@lists.fedoraproject.org

1 participants
321 discussions

[Bug 1465573] CVE-2017-7536 hibernate-validator: Privilege escalation when running under the security manager
by bugzilla＠redhat.com 02 Jan '18

02 Jan '18

https://bugzilla.redhat.com/show_bug.cgi?id=1465573 Bharti Kundal <bkundal(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(bkundal(a)redhat.co | |m) | --- Comment #24 from Bharti Kundal <bkundal(a)redhat.com> --- (In reply to Salvatore Bonaccorso from comment #21) > Hi > > Would it be possible to indicate where the issue was fixed? In Debian we > ship libhibernate-validator-java and we would like to clarify if/how we are > affected by the issue. Is there any furher reference? > > Thank you already! > > Regards, > Salvatore Hi Salvatore, The issue affected all the HV 5.x branches (so 5.2, 5.3, 5.4 are all affected). 6 is not. It's fixed in the upstream 5.2 branch .The branch is here: https://github.com/hibernate/hibernate-validator/tree/5.2 Does this help? Thanks and Regards, Bharti -- You are receiving this mail because: You are on the CC list for the bug.

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits January 2018