< back to search

gpp_maybe Security update for xstream

SUSE-SLE-Module-Development-Tools-15-SP4-2023-1673

This update for xstream fixes the following issues: - CVE-2022-40151: Fixed stackoverflow in XML serialization (bsc#1203520). - CVE-2022-41966: Fixed denial of service via uncontrolled recursion during deserialization (bsc#1206729). - Upgrade to 1.4.20.

Release Date

Mar 29 2023
References

Bugzilla: 1203520, 1206729
CVEs: CVE-2022-41966, CVE-2022-40151
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Development Tools Module 15.4 ppc64le

Packages

xstream
Java XML serialization library

1.4.20-150200.3.25.1 lock rpm lock src

Development Tools Module 15.4 s390x

Packages

xstream
Java XML serialization library

1.4.20-150200.3.25.1 lock rpm lock src

Development Tools Module 15.4 aarch64

Packages

xstream
Java XML serialization library

1.4.20-150200.3.25.1 lock rpm lock src

Development Tools Module 15.4 x86_64

Packages

xstream
Java XML serialization library

1.4.20-150200.3.25.1 lock rpm lock src