gpp_maybe Security update for xstream

SUSE-SLE-Module-Development-Tools-15-SP2-2021-3476

This update for xstream fixes the following issues: - Upgrade to 1.4.18 - CVE-2021-39139: Fixed an issue that allowed an attacker to execute arbitrary code execution by manipulating the processed input stream with type information. (bsc#1189798) - CVE-2021-39140: Fixed an issue that allowed an attacker to execute a DoS attack by manipulating the processed input stream. (bsc#1189798) - CVE-2021-39141: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39144: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39145: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39146: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39147: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39148: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39149: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39150: Fixed an issue that allowed an attacker to access protected resources hosted within the intranet or in the host itself. (bsc#1189798) - CVE-2021-39151: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39152: Fixed an issue that allowed an attacker to access protected resources hosted within the intranet or in the host itself. (bsc#1189798) - CVE-2021-39153: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39154: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798)

• Release Date
  Oct 20 2021
• References
  Bugzilla: 1189798
  CVEs: CVE-2021-39153, CVE-2021-39154, CVE-2021-39151, CVE-2021-39144, CVE-2021-39141, CVE-2021-39139, CVE-2021-39140, CVE-2021-39148, CVE-2021-39145, CVE-2021-39147, CVE-2021-39149, CVE-2021-39146, CVE-2021-39150, CVE-2021-39152
• Type
  security
• Severity
  important

cloud_download Downloads

Development Tools Module 15.2 aarch64

• Packages
  xstream
  Java XML serialization library

  1.4.18-3.14.1 lock rpm lock src

Development Tools Module 15.2 ppc64le

• Packages
  xstream
  Java XML serialization library

  1.4.18-3.14.1 lock rpm lock src

Development Tools Module 15.2 s390x

• Packages
  xstream
  Java XML serialization library

  1.4.18-3.14.1 lock rpm lock src

Development Tools Module 15.2 x86_64

• Packages
  xstream
  Java XML serialization library

  1.4.18-3.14.1 lock rpm lock src