Debian/libxstream-java: critical 9.8
It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote attack
Action: Upgrade libxstream-java to 1.4.11-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.11-1 | - |
Fixed versions
| 1.4.11-1 |
Sources
published · modified · JSON