This bug was fixed in the package libxstream-java - 1.4.8-1ubuntu0.1
---------------
libxstream-java (1.4.8-1ubuntu0.1) xenial-security; urgency=medium
* SECURITY UPDATE: handle void type class (LP: #1780844)
- d/p/CVE-2017-7957.patch: Prevent deserialization of void.
- CVE-2017-7957
-- Dan Streetman <[email protected]> Mon, 09 Jul 2018 15:21:51
-0400
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1780844
Title:
CVE-2017-7957: XStream through 1.4.9 mishandles attempts to create an
instance of the primitive type 'void'
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libxstream-java/+bug/1780844/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
