TI-2021-10213 CVE-2021-29505 · GHSA-7chv-rrw6-w6fc
XStream is vulnerable to a Remote Command Execution attack
Priority HIGH 79
XStream is software for serializing Java objects to XML and back again.
RHSA-2021:2683
xstream security update
Released 2021-07-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) xstream-1.3.1-14.el7_9, xstream-javadoc-1.3.1-14.el7_9
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) xstream-1.3.1-14.el7_9, xstream-javadoc-1.3.1-14.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) xstream-1.3.1-14.el7_9, xstream-javadoc-1.3.1-14.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) xstream-1.3.1-14.el7_9, xstream-javadoc-1.3.1-14.el7_9