Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Scientific Linux: SLSA-2021:0162-1 Important XStream Remote Execution

Calendar Jan 26, 2021 • User Avatar LinuxSecurity Advisories
1 min read
Scientific Large Esm H500
Topics%20covered

Topics Covered

security advisory remote execution important important update scientific linux xml deserialization
XStream: remote code execution due to insecure XML deserialization when relying on blocklists (CVE-2020-26217) SL7 noarch xstream-1.3.1-12.el7_9.noarch.rpm xstream-javadoc-1.3.1-12.el7_9.noarch.rpm - Scientific Linux Development Team 
Synopsis:          Important: xstream security update
Advisory ID:       SLSA-2021:0162-1
Issue Date:        2021-01-19
CVE Numbers:       CVE-2020-26217
--

Security Fix(es):

* XStream: remote code execution due to insecure XML deserialization when
relying on blocklists (CVE-2020-26217)
--

SL7
  noarch
    xstream-1.3.1-12.el7_9.noarch.rpm
    xstream-javadoc-1.3.1-12.el7_9.noarch.rpm

- Scientific Linux Development Team
Your message here