SUSE-SU-2021:3476-1

Dashboard / Vulnerabilities / SUSE-SU-2021:3476-1

SUSE-SU-2021:3476-1

Summary: Security update for xstream

Details: This update for xstream fixes the following issues: - Upgrade to 1.4.18 - CVE-2021-39139: Fixed an issue that allowed an attacker to execute arbitrary code execution by manipulating the processed input stream with type information. (bsc#1189798) - CVE-2021-39140: Fixed an issue that allowed an attacker to execute a DoS attack by manipulating the processed input stream. (bsc#1189798) - CVE-2021-39141: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39144: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39145: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39146: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39147: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39148: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39149: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39150: Fixed an issue that allowed an attacker to access protected resources hosted within the intranet or in the host itself. (bsc#1189798) - CVE-2021-39151: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39152: Fixed an issue that allowed an attacker to access protected resources hosted within the intranet or in the host itself. (bsc#1189798) - CVE-2021-39153: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798) - CVE-2021-39154: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798)

References: https://www.suse.com/support/update/announcement/2021/suse-su-20213476-1/, https://bugzilla.suse.com/1189798, https://www.suse.com/security/cve/CVE-2021-39139, https://www.suse.com/security/cve/CVE-2021-39140, https://www.suse.com/security/cve/CVE-2021-39141, https://www.suse.com/security/cve/CVE-2021-39144, https://www.suse.com/security/cve/CVE-2021-39145, https://www.suse.com/security/cve/CVE-2021-39146, https://www.suse.com/security/cve/CVE-2021-39147, https://www.suse.com/security/cve/CVE-2021-39148, https://www.suse.com/security/cve/CVE-2021-39149, https://www.suse.com/security/cve/CVE-2021-39150, https://www.suse.com/security/cve/CVE-2021-39151, https://www.suse.com/security/cve/CVE-2021-39152, https://www.suse.com/security/cve/CVE-2021-39153, https://www.suse.com/security/cve/CVE-2021-39154