ELSA-2021-3956

ELSA-2021-3956 - xstream security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-10-25

Description

[1.3.1-16]
- Fix workaround
- Resolves: CVE-2021-39148

[1.3.1-15]
- Fix remote code execution vulnerabilities
- Resolves: CVE-2021-39139
- Resolves: CVE-2021-39140
- Resolves: CVE-2021-39141
- Resolves: CVE-2021-39144
- Resolves: CVE-2021-39145
- Resolves: CVE-2021-39146
- Resolves: CVE-2021-39147
- Resolves: CVE-2021-39148
- Resolves: CVE-2021-39149
- Resolves: CVE-2021-39150
- Resolves: CVE-2021-39151
- Resolves: CVE-2021-39152
- Resolves: CVE-2021-39153
- Resolves: CVE-2021-39154

Related CVEs

CVE-2021-39139

CVE-2021-39140

CVE-2021-39144

CVE-2021-39145

CVE-2021-39149

CVE-2021-39141

CVE-2021-39153

CVE-2021-39146

CVE-2021-39150

CVE-2021-39151

CVE-2021-39154

CVE-2021-39148

CVE-2021-39147

CVE-2021-39152

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	xstream-1.3.1-16.el7_9.src.rpm	e1cb2565177e244c21ca5db18dc8ad060856b11769b3332ce01c63eba0433704	-	ol7_aarch64_optional_latest
	xstream-1.3.1-16.el7_9.noarch.rpm	7dfbaa0a04a85f7aae61921fddb4da231a18823960252a0bc08f16181db24020	-	ol7_aarch64_optional_latest
	xstream-javadoc-1.3.1-16.el7_9.noarch.rpm	a8798f330861a99ddc57a1358ed3d4ef60915a19aa6bc19c93e899d3b0c100f8	-	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	xstream-1.3.1-16.el7_9.src.rpm	e1cb2565177e244c21ca5db18dc8ad060856b11769b3332ce01c63eba0433704	-	ol7_x86_64_optional_latest
	xstream-1.3.1-16.el7_9.noarch.rpm	7dfbaa0a04a85f7aae61921fddb4da231a18823960252a0bc08f16181db24020	-	ol7_x86_64_optional_latest
	xstream-javadoc-1.3.1-16.el7_9.noarch.rpm	a8798f330861a99ddc57a1358ed3d4ef60915a19aa6bc19c93e899d3b0c100f8	-	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team