File _patchinfo of Package patchinfo.21334

<patchinfo incident="21334">
  <issue tracker="cve" id="2021-39153"/>
  <issue tracker="cve" id="2021-39154"/>
  <issue tracker="cve" id="2021-39151"/>
  <issue tracker="cve" id="2021-39144"/>
  <issue tracker="cve" id="2021-39141"/>
  <issue tracker="cve" id="2021-39139"/>
  <issue tracker="cve" id="2021-39140"/>
  <issue tracker="cve" id="2021-39148"/>
  <issue tracker="cve" id="2021-39145"/>
  <issue tracker="cve" id="2021-39147"/>
  <issue tracker="cve" id="2021-39149"/>
  <issue tracker="cve" id="2021-39146"/>
  <issue tracker="cve" id="2021-39150"/>
  <issue tracker="cve" id="2021-39152"/>
  <issue tracker="bnc" id="1189798">VUL-0: xstream: Multiple vulnerabilities affecting version &lt; 1.4.18</issue>
  <packager>fstrba</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for xstream</summary>
  <description>This update for xstream fixes the following issues:

- Upgrade to 1.4.18
- CVE-2021-39139: Fixed an issue that allowed an attacker to execute arbitrary code execution by manipulating the processed input stream with type information. (bsc#1189798)
- CVE-2021-39140: Fixed an issue that allowed an attacker to execute a DoS attack by manipulating the processed input stream. (bsc#1189798)
- CVE-2021-39141: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798)
- CVE-2021-39144: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798)
- CVE-2021-39145: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798)
- CVE-2021-39146: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798)
- CVE-2021-39147: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798)
- CVE-2021-39148: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798)
- CVE-2021-39149: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798)
- CVE-2021-39150: Fixed an issue that allowed an attacker to access protected resources hosted within the intranet or in the host itself. (bsc#1189798)
- CVE-2021-39151: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798)
- CVE-2021-39152: Fixed an issue that allowed an attacker to access protected resources hosted within the intranet or in the host itself. (bsc#1189798)
- CVE-2021-39153: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798)
- CVE-2021-39154: Fixed an issue that allowed an attacker to achieve arbitrary code execution. (bsc#1189798)
</description>
</patchinfo>