File _patchinfo of Package patchinfo.28299
<patchinfo incident="28299"> <issue tracker="cve" id="2022-41966"/> <issue tracker="cve" id="2022-40151"/> <issue tracker="bnc" id="1203520">VUL-0: CVE-2022-40151: xstream: stackoverflow in XML serialization</issue> <issue tracker="bnc" id="1206729">VUL-0: CVE-2022-41966: xstream: denial of service via uncontrolled recursion during deserialization</issue> <packager>fstrba</packager> <rating>important</rating> <category>security</category> <summary>Security update for xstream</summary> <description>This update for xstream fixes the following issues: - CVE-2022-40151: Fixed stackoverflow in XML serialization (bsc#1203520). - CVE-2022-41966: Fixed denial of service via uncontrolled recursion during deserialization (bsc#1206729). - Upgrade to 1.4.20. </description> </patchinfo>