[JBoss JIRA] (JGRP-2033) Replace Java serialization with JGroups marshalling
- First Post
- Replies
- Stats
-
Go to
- ----- 2026 -----
- April
- March
- February
- January
- ----- 2025 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2006 -----
- December
- November
- October
- September
- August
- July
[
https://issues.jboss.org/browse/JGRP-2033?page=com.atlassian.jira.plugin....
]
Bela Ban updated JGRP-2033:
---------------------------
Description:
In some cases, even JGroups internal code still uses Java serialization. Replace this with
marshalling (using {{Streamable}}). The vulnerability is described in [1].
[1]
http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-j...
was:In some cases, even JGroups internal code still uses Java serialization. Replace
this with marshalling (using {{Streamable}})
Replace Java serialization with JGroups marshalling
---------------------------------------------------
Key: JGRP-2033
URL: https://issues.jboss.org/browse/JGRP-2033
Project: JGroups
Issue Type: Task
Reporter: Bela Ban
Assignee: Bela Ban
Fix For: 3.6.9, 4.0
In some cases, even JGroups internal code still uses Java serialization. Replace this
with marshalling (using {{Streamable}}). The vulnerability is described in [1].
[1]
http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-j...
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
3690
days inactive
3690
days old
0 comments
1 participants
tags (0)
participants (1)
-
Bela Ban (JIRA)