Lucene search
GoogleOSV:DSA-3575-1HistoryMay 12, 2016 - 12:00 a.m.
libxstream-java - security update
2016-05-1200:00:00
Google
osv.dev
18
EPSS
0.002
Percentile
55.3%
It was discovered that XStream, a Java library to serialize objects to
XML and back again, was susceptible to XML External Entity attacks.
For the stable distribution (jessie), this problem has been fixed in
version 1.4.7-2+deb8u1.
For the testing distribution (stretch), this problem has been fixed
in version 1.4.9-1.
For the unstable distribution (sid), this problem has been fixed in
version 1.4.9-1.
We recommend that you upgrade your libxstream-java packages.
References
Related
fedora
fedora
[SECURITY] Fedora 23 Update: xstream-1.4.9-1.fc23
2016-04-26 20:58:33
[SECURITY] Fedora 22 Update: xstream-1.4.9-1.fc22
2016-04-26 21:24:48
[SECURITY] Fedora 24 Update: xstream-1.4.9-1.fc24
2016-04-04 17:28:40
debian
debian
[SECURITY] [DSA 3575-1] libxstream-java security update
2016-05-12 20:06:14
[SECURITY] [DLA 504-1] libxstream-java security update
2016-06-08 09:16:41
atlassian
atlassian
Upgrade Xstream to address CVE-2016-3674
2019-07-08 23:36:22
Upgrade Xstream to address CVE-2016-3674
2019-07-08 23:32:08
Upgrade Xstream to address CVE-2016-3674
2019-07-08 23:36:22
osv
osv
XML External Entity Injection in XStream
2020-06-30 22:48:14
libxstream-java vulnerabilities
2024-08-22 15:18:01
xstream-1.4.18-1.1 on GA media
2024-06-15 00:00:00
nvd
nvd
CVE-2016-3674
2016-05-17 14:08:03
github
github
XML External Entity Injection in XStream
2020-06-30 22:48:14
openvas
openvas
Debian: Security Advisory (DLA-504-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3575-1)
2016-05-11 00:00:00
Debian Security Advisory DSA 3575-1 (libxstream-java - security update)
2016-05-12 00:00:00
nessus
nessus
Debian DLA-504-1 : libxstream-java security update
2016-06-09 00:00:00
Fedora 22 : xstream-1.4.9-1.fc22 (2016-250042b8a6)
2016-04-27 00:00:00
Fedora 24 : xstream-1.4.9-1.fc24 (2016-175b56bb05)
2016-04-05 00:00:00
ibm
ibm
debiancve
debiancve
CVE-2016-3674
2016-05-17 14:08:03
cve
cve
CVE-2016-3674
2016-05-17 14:08:03
prion
prion
Xxe
2016-05-17 14:08:00
ubuntucve
ubuntucve
CVE-2016-3674
2016-05-17 00:00:00
mageia
mageia
Updated xstream packages fix CVE-2016-3674
2016-05-05 19:26:44
cvelist
cvelist
CVE-2016-3674
2016-05-17 14:00:00
redhat
redhat
(RHSA-2016:2823) Moderate: Red Hat JBoss BRMS security update
2016-11-28 17:47:01
(RHSA-2016:2822) Moderate: Red Hat JBoss BPM Suite security update
2016-11-28 17:46:38
ubuntu
ubuntu
XStream vulnerabilities
2024-08-22 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2017
2017-04-18 00:00:00