High ELSA-2021-0162 1 CVE

Important: xstream security update (Oracle Linux 7)

Published Jan 19, 2021 · Updated Jan 19, 2021

Ecosystem: Oracle Linux

Summary

[1.3.1-12]
- Rebuild with OpenJDK 7

[1.3.1-11]
- Fix remote code execution vulnerability
- Resolves: CVE-2020-26217

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 7	xstream	0:1.3.1-12.el7_9
Oracle Linux · 7	xstream-javadoc	0:1.3.1-12.el7_9

Vulnerabilities 1

High 8.0

CVE-2020-26217 Public exploit Scanner template EPSS 85%

Remote Code Execution in XStream

XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XS…

x-stream xstream libxstream-java com.thoughtworks.xstream:xstream Debian Ubuntu Maven

Nov 16, 2020