Red Hat Security Advisory

RHSA-2021:1354

xstream security update

Released 2021-04-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Optional (v. 7) xstream-1.3.1-13.el7_9, xstream-javadoc-1.3.1-13.el7_9
Red Hat Enterprise Linux ComputeNode Optional (v. 7) xstream-1.3.1-13.el7_9, xstream-javadoc-1.3.1-13.el7_9
Red Hat Enterprise Linux Server Optional (v. 7) xstream-1.3.1-13.el7_9, xstream-javadoc-1.3.1-13.el7_9
Red Hat Enterprise Linux Workstation Optional (v. 7) xstream-1.3.1-13.el7_9, xstream-javadoc-1.3.1-13.el7_9

TI-2021-04446 CVE-2021-21346 · GHSA-4hrm-m67v-5cxr

CRITICAL 88

XStream is a Java library to serialize objects to XML and back again.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.76367 Published 2021-03-22 Partial fix · 1.4.16 CWE-434

TI-2021-04444 CVE-2021-21344 · GHSA-59jw-jqf4-3wq3

CRITICAL 88

XStream is a Java library to serialize objects to XML and back again.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.7598 Published 2021-03-22 Partial fix · 1.4.16 CWE-434

TI-2021-04445 CVE-2021-21345 · GHSA-hwpc-8xqv-jvj4

HIGH 81

XStream is a Java library to serialize objects to XML and back again.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.72324 Published 2021-03-22 Partial fix · 1.4.16 CWE-502

TI-2021-04450 CVE-2021-21350 · GHSA-43gc-mjxg-gvrq

HIGH 65

XStream is a Java library to serialize objects to XML and back again.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15234 Published 2021-03-22 Partial fix · 1.4.16 CWE-434

TI-2021-04447 CVE-2021-21347 · GHSA-qpfq-ph7r-qv6f

MEDIUM 64

XStream is a Java library to serialize objects to XML and back again.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14301 Published 2021-03-22 Partial fix · 1.4.16 CWE-434