[Git][security-tracker-team/security-tracker][master] CVE-2021-43859/libxstream-java

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ec0f4e96 by Salvatore Bonaccorso at 2022-02-08T07:28:24+01:00
CVE-2021-43859/libxstream-java

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15547,7 +15547,10 @@ CVE-2021-43860 (Flatpak is a Linux application sandboxing and distribution frame
 	NOTE: https://github.com/flatpak/flatpak/commit/93357d357119093804df05acc32ff335839c6451
 	NOTE: https://github.com/flatpak/flatpak/commit/65cbfac982cb1c83993a9e19aa424daee8e9f042
 CVE-2021-43859 (XStream is an open source java library to serialize objects to XML and ...)
-	TODO: check
+	- libxstream-java <unfixed>
+	NOTE: https://github.com/x-stream/xstream/security/advisories/GHSA-rmr5-cpv2-vgjf
+	NOTE: https://x-stream.github.io/CVE-2021-43859.html
+	NOTE: https://github.com/x-stream/xstream/commit/e8e88621ba1c85ac3b8620337dd672e0c0c3a846
 CVE-2021-43858 (MinIO is a Kubernetes native application for cloud storage. Prior to v ...)
 	NOT-FOR-US: MinIO
 CVE-2021-43857 (Gerapy is a distributed crawler management framework. Gerapy prior to  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec0f4e963508067c4a4584a1baf2fb6ce6be30f0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec0f4e963508067c4a4584a1baf2fb6ce6be30f0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220208/f72eb467/attachment.htm>