[SECURITY] Fedora 35 Update: xstream-1.4.18-2.fc35

🗓️ 29 Oct 2021 23:18:39Reported by FedoraType

fedora🔗 lists.fedoraproject.org👁 48 Views

Fedora 35 update for xstream-1.4.18-2.fc3

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in XStream	27 Feb 202103:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in XStream affect IBM Spectrum Copy Data Management	11 Dec 202100:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator is vulnerable to multiple vulnerabilities due to Xstream	13 May 202214:58	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in Xstream, which is a required product for IBM Tivoli Network Configuration Manager (CVE-2020-26258, CVE-2020-26259)	24 Mar 202107:43	–	ibm
IBM Security Bulletins	Security Bulletin: Atlas eDiscovery Process Management is affected by a vulnerable xstream-1.4.17.jar	8 May 202308:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites affect IBM Engineering Test Management product due to XStream	26 Jul 202206:38	–	ibm
IBM Security Bulletins	Security Bulletin: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating	13 Apr 202121:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in XStream affect IBM Spectrum Protect Plus	10 Dec 202120:38	–	ibm
IBM Security Bulletins	Security Bulletin: XStream Vulnerability Affects IBM Sterling B2B Integrator (CVE-2021-29505)	5 Oct 202119:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in XStream	1 Oct 202106:19	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Fedora	35	any	xstream	1.4.18	UNKNOWN

29 Oct 2021 23:18Current

6.8Medium risk

Vulners AI Score6.8

CVSS 27.8

CVSS 3.18.5 - 9.9

EPSS0.98124

xstream library xml serialization high performance object graphs java serialization circular references exception handling