Bug#861521: libxstream-java: CVE-2017-7957

2017-04-30 Thread Emmanuel Bourg
Thank you Salvatore. Here is the upstream commit that has to be backported: https://github.com/x-stream/xstream/commit/b3570be Emmanuel Bourg

Bug#861521: libxstream-java: CVE-2017-7957

2017-04-30 Thread Salvatore Bonaccorso
Source: libxstream-java Version: 1.4.7-2 Severity: important Tags: security upstream Hi, the following vulnerability was published for libxstream-java. CVE-2017-7957[0]: | XStream through 1.4.9, when a certain denyTypes workaround is not used, | mishandles attempts to create an instance of the