openSUSE Leap 15.3: 2021:1840-1 Important: xstream Remote Code Execution

This update for xstream fixes the following issues:

- Upgrade to 1.4.16

- CVE-2021-21351: remote attacker to load and execute arbitrary code

(bsc#1184796)

- CVE-2021-21349: SSRF can lead to a remote attacker to request data from

internal resources (bsc#1184797)

- CVE-2021-21350: arbitrary code execution (bsc#1184380)

- CVE-2021-21348: remote attacker could cause denial of service by

consuming maximum CPU time (bsc#1184374)

- CVE-2021-21347: remote attacker to load and execute arbitrary code from

a remote host (bsc#1184378)

- CVE-2021-21344: remote attacker could load and execute arbitrary code

from a remote host (bsc#1184375)

- CVE-2021-21342: server-side forgery (bsc#1184379)

- CVE-2021-21341: remote attacker could cause a denial of service by

allocating 100% CPU time (bsc#1184377)

- CVE-2021-21346: remote attacker could load and execute arbitrary code

(bsc#1184373)

- CVE-2021-21345: remote attacker with...