Updated libxstream-java packages are now available for Debian GNU/Linux 8 (Jessie) and 10 (Buster) Extended LTS:

ELA-1402-1 libxstream-java security update

ELA-1402-1 libxstream-java security update

Package : libxstream-java

Version : 1.4.11.1-1+deb8u7 (jessie), 1.4.11.1-1+deb10u5 (buster)

Related CVEs :
CVE-2024-47072

XStream is a Java library to serialize objects to XML and back again. This
vulnerability may allow a remote attacker to terminate the application with a
stack overflow error resulting in a denial of service only by manipulating the
processed input stream when XStream is configured to use the
BinaryStreamDriver. XStream has been patched to detect the manipulation in the
binary input stream causing the stack overflow and raises an
InputManipulationException instead.

ELA-1402-1 libxstream-java security update