Blame SOURCES/CVE-2018-14718.patch

198d59
From 260944ec36d41076365d5ebf8f54cba2189a480f Mon Sep 17 00:00:00 2001
198d59
From: Mikolaj Izdebski <mizdebsk@redhat.com>
198d59
Date: Tue, 2 Apr 2019 13:58:09 +0200
198d59
Subject: [PATCH 08/14] CVE-2018-14718
198d59
198d59
---
198d59
 .../jackson/databind/jsontype/impl/SubTypeValidator.java        | 2 ++
198d59
 1 file changed, 2 insertions(+)
198d59
198d59
diff --git a/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java b/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java
198d59
index 3a480272e..ba6d48cd3 100644
198d59
--- a/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java
198d59
+++ b/src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java
198d59
@@ -57,6 +57,8 @@ public class SubTypeValidator
198d59
         // CVE-2018-12023
198d59
         s.add("oracle.jdbc.connector.OracleManagedConnectionFactory");
198d59
         s.add("oracle.jdbc.rowset.OracleJDBCRowSet");
198d59
+        // CVE-2018-14718
198d59
+        s.add("org.slf4j.ext.EventData");
198d59
         DEFAULT_NO_DESER_CLASS_NAMES = Collections.unmodifiableSet(s);
198d59
     }
198d59
 
198d59
-- 
198d59
2.20.1
198d59