[Git][security-tracker-team/security-tracker][master] Add new libxstream-java issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2cebd130 by Salvatore Bonaccorso at 2021-08-23T22:22:55+02:00
Add new libxstream-java issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1030,37 +1030,65 @@ CVE-2021-39156
 CVE-2021-39155
 	RESERVED
 CVE-2021-39154 (XStream is a simple library to serialize objects to XML and back again ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-6w62-hx7r-mw68
+	NOTE: https://x-stream.github.io/CVE-2021-39154.html
 CVE-2021-39153 (XStream is a simple library to serialize objects to XML and back again ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-2q8x-2p7f-574v
+	NOTE: https://x-stream.github.io/CVE-2021-39153.html
 CVE-2021-39152 (XStream is a simple library to serialize objects to XML and back again ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-xw4p-crpj-vjx2
+	NOTE: https://x-stream.github.io/CVE-2021-39152.html
 CVE-2021-39151 (XStream is a simple library to serialize objects to XML and back again ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-hph2-m3g5-xxv4
+	NOTE: https://x-stream.github.io/CVE-2021-39151.html
 CVE-2021-39150 (XStream is a simple library to serialize objects to XML and back again ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-cxfm-5m4g-x7xp
+	NOTE: https://x-stream.github.io/CVE-2021-39150.html
 CVE-2021-39149 (XStream is a simple library to serialize objects to XML and back again ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-3ccq-5vw3-2p6x
+	NOTE: https://x-stream.github.io/CVE-2021-39149.html
 CVE-2021-39148 (XStream is a simple library to serialize objects to XML and back again ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-qrx8-8545-4wg2
+	NOTE: https://x-stream.github.io/CVE-2021-39148.html
 CVE-2021-39147 (XStream is a simple library to serialize objects to XML and back again ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-h7v4-7xg3-hxcc
+	NOTE: https://x-stream.github.io/CVE-2021-39147.html
 CVE-2021-39146 (XStream is a simple library to serialize objects to XML and back again ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-p8pq-r894-fm8f
+	NOTE: https://x-stream.github.io/CVE-2021-39146.html
 CVE-2021-39145 (XStream is a simple library to serialize objects to XML and back again ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-8jrj-525p-826v
+	NOTE: https://x-stream.github.io/CVE-2021-39145.html
 CVE-2021-39144 (XStream is a simple library to serialize objects to XML and back again ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-j9h8-phrw-h4fh
+	NOTE: https://x-stream.github.io/CVE-2021-39144.html
 CVE-2021-39143
 	RESERVED
 CVE-2021-39142
 	RESERVED
 CVE-2021-39141 (XStream is a simple library to serialize objects to XML and back again ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-g5w6-mrj7-75h2
+	NOTE: https://x-stream.github.io/CVE-2021-39141.html
 CVE-2021-39140 (XStream is a simple library to serialize objects to XML and back again ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-6wf9-jmg9-vxcc
+	NOTE: https://x-stream.github.io/CVE-2021-39140.html
 CVE-2021-39139 (XStream is a simple library to serialize objects to XML and back again ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-64xx-cq4q-mf44
+	NOTE: https://x-stream.github.io/CVE-2021-39139.html
 CVE-2021-39138 (Parse Server is an open source backend that can be deployed to any inf ...)
 	NOT-FOR-US: Parse Server
 CVE-2021-39137



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2cebd1308b76e24b711c467b15b1332823efbce8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2cebd1308b76e24b711c467b15b1332823efbce8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210823/4611d949/attachment.htm>