CVE catalog

CVE-2017-7957

libxstream-java affected and fixed versions

[CVE catalog]

XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call.

Severity
High · CVSS 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
4.93% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixielibxstream-java1.4.21-1Fixed[CVE-2017-7957]
Debiantrixielibxstream-java1.4.9-2FixedDistribution-reported fixed boundary[CVE-2017-7957]
Debiansidlibxstream-java1.4.21-2Fixed[CVE-2017-7957]
Debiansidlibxstream-java1.4.9-2FixedDistribution-reported fixed boundary[CVE-2017-7957]
Debianforkylibxstream-java1.4.21-2Fixed[CVE-2017-7957]
Debianforkylibxstream-java1.4.9-2FixedDistribution-reported fixed boundary[CVE-2017-7957]
Debianbookwormlibxstream-java1.4.20-1+deb12u1Fixed[CVE-2017-7957]
Debianbookwormlibxstream-java1.4.9-2FixedDistribution-reported fixed boundary[CVE-2017-7957]

Showing 8 fix observations. All 42 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Debianbookwormlibxstream-java1.4.20-1+deb12u1Fixed[CVE-2017-7957]
Debianbookwormlibxstream-java1.4.9-2FixedDistribution-reported fixed boundary[CVE-2017-7957]
Debianforkylibxstream-java1.4.21-2Fixed[CVE-2017-7957]
Debianforkylibxstream-java1.4.9-2FixedDistribution-reported fixed boundary[CVE-2017-7957]
Debiansidlibxstream-java1.4.21-2Fixed[CVE-2017-7957]
Debiansidlibxstream-java1.4.9-2FixedDistribution-reported fixed boundary[CVE-2017-7957]
Debiantrixielibxstream-java1.4.21-1Fixed[CVE-2017-7957]
Debiantrixielibxstream-java1.4.9-2FixedDistribution-reported fixed boundary[CVE-2017-7957]
Susemanager proxy 3.2spacewalk-backend2.8.57.14-3.25.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager proxy 3.2spacewalk-certs-tools2.8.8.7-3.6.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager proxy 3.2spacewalk-web2.8.7.15-3.24.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.0xstream1.4.9-4.3.1UnknownSource applicability is not established[SUSE-SU-2017:3389-1]
Susemanager server 3.1xstream1.4.9-3.3.1UnknownSource applicability is not established[SUSE-SU-2017:3390-1]
Susemanager server 3.2apache-commons-lang33.4-3.3.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2cobbler2.6.6-6.16.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2drools7.17.0-3.3.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2guava27.0.1-3.3.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2jade4j1.0.7-3.3.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2kie-api7.17.0-3.3.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2kie-soup7.17.0.Final-2.3.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2optaplanner7.17.0-3.3.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2py26-compat-salt2016.11.10-6.21.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2reprepro5.3.0-2.3.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2smdba1.6.4-0.3.9.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2spacecmd2.8.25.10-3.20.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2spacewalk-admin2.8.4.4-3.6.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2spacewalk-backend2.8.57.14-3.25.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2spacewalk-branding2.8.5.15-3.19.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2spacewalk-certs-tools2.8.8.7-3.6.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2spacewalk-java2.8.78.21-3.29.1UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2spacewalk-web2.8.7.15-3.24.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2subscription-matcher0.23-4.12.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2susemanager3.2.17-3.22.4UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2susemanager-schema3.2.18-3.22.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2susemanager-sls3.2.23-3.26.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2susemanager-sync-data3.2.14-3.20.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Susemanager server 3.2xstream1.4.10-4.3.3UnknownSource applicability is not established[SUSE-RU-2019:1006-1][SUSE-SU-2019:1006-1]
Ubuntu14.04libxstream-java1.4.4-1UnknownSource applicability is not established[UBUNTU-CVE-2017-7957]
Ubuntu14.04libxstream-java1.4.7-1UnknownSource applicability is not established[UBUNTU-CVE-2017-7957]
Ubuntu14.04libxstream-java1.4.7-1ubuntu0.1UnknownSource applicability is not established[UBUNTU-CVE-2017-7957]
Ubuntu16.04libxstream-java1.4.8-1UnknownSource applicability is not established[UBUNTU-CVE-2017-7957]
Ubuntu16.04libxstream-java1.4.8-1ubuntu0.1UnknownSource applicability is not established[UBUNTU-CVE-2017-7957]
Original provider fields
{
  "package_releases": [
    {
      "name": "libxstream-java",
      "status": "fixed",
      "release": "sid",
      "version": "1.4.21-2"
    },
    {
      "name": "libxstream-java",
      "status": "fixed",
      "release": "forky",
      "version": "1.4.21-2"
    },
    {
      "name": "libxstream-java",
      "status": "fixed",
      "release": "trixie",
      "version": "1.4.21-1"
    },
    {
      "name": "libxstream-java",
      "status": "fixed",
      "release": "bookworm",
      "version": "1.4.20-1+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 861521,
      "name": "libxstream-java",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "1.4.9-2"
    },
    {
      "bug": 861521,
      "name": "libxstream-java",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "1.4.9-2"
    },
    {
      "bug": 861521,
      "name": "libxstream-java",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "1.4.9-2"
    },
    {
      "bug": 861521,
      "name": "libxstream-java",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "1.4.9-2"
    }
  ],
  "distribution_packages": [
    {
      "name": "fuse",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7957",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2017-7957",
      "provider_updated_at": "2026-10-08T21:17:05.933"
    },
    {
      "name": "jboss_middleware",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7957",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2017-7957",
      "provider_updated_at": "2026-10-08T21:17:05.933"
    },
    {
      "name": "xstream",
      "ranges": [
        {
          "fixed": "",
          "introduced": "",
          "last_affected": "1.4.9",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7957",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2017-7957",
      "provider_updated_at": "2026-10-08T21:17:05.933"
    },
    {
      "name": "debian_linux",
      "ranges": [],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7957",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2017-7957",
      "provider_updated_at": "2026-10-08T21:17:05.933"
    },
    {
      "name": "spacewalk-backend",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.57.14-3.25.3"
            }
          ]
        }
      ],
      "release": "manager proxy 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "2.8.57.14-3.25.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-certs-tools",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.8.7-3.6.3"
            }
          ]
        }
      ],
      "release": "manager proxy 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "2.8.8.7-3.6.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-web",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.7.15-3.24.3"
            }
          ]
        }
      ],
      "release": "manager proxy 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "2.8.7.15-3.24.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "apache-commons-lang3",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4-3.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "3.4-3.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "cobbler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.6-6.16.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "2.6.6-6.16.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "drools",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.17.0-3.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "7.17.0-3.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "guava",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "27.0.1-3.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "27.0.1-3.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "jade4j",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.7-3.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "1.0.7-3.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "kie-api",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.17.0-3.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "7.17.0-3.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "kie-soup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.17.0.Final-2.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "7.17.0.Final-2.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "optaplanner",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.17.0-3.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "7.17.0-3.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "py26-compat-salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2016.11.10-6.21.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "2016.11.10-6.21.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "reprepro",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.3.0-2.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "5.3.0-2.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "smdba",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.4-0.3.9.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "1.6.4-0.3.9.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "spacecmd",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.25.10-3.20.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "2.8.25.10-3.20.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-admin",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.4.4-3.6.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "2.8.4.4-3.6.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-backend",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.57.14-3.25.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "2.8.57.14-3.25.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-branding",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.5.15-3.19.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "2.8.5.15-3.19.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-certs-tools",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.8.7-3.6.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "2.8.8.7-3.6.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-java",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.78.21-3.29.1"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "2.8.78.21-3.29.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-web",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.7.15-3.24.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "2.8.7.15-3.24.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "subscription-matcher",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.23-4.12.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "0.23-4.12.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "susemanager",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.2.17-3.22.4"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "3.2.17-3.22.4",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "susemanager-schema",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.2.18-3.22.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "3.2.18-3.22.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "susemanager-sls",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.2.23-3.26.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "3.2.23-3.26.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "susemanager-sync-data",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.2.14-3.20.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "3.2.14-3.20.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "xstream",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.4.10-4.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-RU-2019:1006-1",
      "fixed_version": "1.4.10-4.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-RU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:37:11.114403Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-backend",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.57.14-3.25.3"
            }
          ]
        }
      ],
      "release": "manager proxy 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "2.8.57.14-3.25.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-certs-tools",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.8.7-3.6.3"
            }
          ]
        }
      ],
      "release": "manager proxy 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "2.8.8.7-3.6.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-web",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.7.15-3.24.3"
            }
          ]
        }
      ],
      "release": "manager proxy 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "2.8.7.15-3.24.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "apache-commons-lang3",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.4-3.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "3.4-3.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "cobbler",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.6-6.16.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "2.6.6-6.16.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "drools",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.17.0-3.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "7.17.0-3.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "guava",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "27.0.1-3.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "27.0.1-3.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "jade4j",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.7-3.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "1.0.7-3.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "kie-api",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.17.0-3.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "7.17.0-3.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "kie-soup",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.17.0.Final-2.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "7.17.0.Final-2.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "optaplanner",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.17.0-3.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "7.17.0-3.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "py26-compat-salt",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2016.11.10-6.21.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "2016.11.10-6.21.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "reprepro",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.3.0-2.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "5.3.0-2.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "smdba",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.4-0.3.9.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "1.6.4-0.3.9.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "spacecmd",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.25.10-3.20.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "2.8.25.10-3.20.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-admin",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.4.4-3.6.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "2.8.4.4-3.6.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-backend",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.57.14-3.25.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "2.8.57.14-3.25.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-branding",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.5.15-3.19.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "2.8.5.15-3.19.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-certs-tools",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.8.7-3.6.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "2.8.8.7-3.6.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-java",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.78.21-3.29.1"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "2.8.78.21-3.29.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "spacewalk-web",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.8.7.15-3.24.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "2.8.7.15-3.24.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "subscription-matcher",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.23-4.12.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "0.23-4.12.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "susemanager",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.2.17-3.22.4"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "3.2.17-3.22.4",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "susemanager-schema",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.2.18-3.22.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "3.2.18-3.22.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "susemanager-sls",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.2.23-3.26.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "3.2.23-3.26.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "susemanager-sync-data",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.2.14-3.20.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "3.2.14-3.20.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "xstream",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.4.10-4.3.3"
            }
          ]
        }
      ],
      "release": "manager server 3.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2019:1006-1",
      "fixed_version": "1.4.10-4.3.3",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2019:1006-1",
      "provider_updated_at": "2026-02-04T04:06:27.957159Z",
      "applicability_unknown": true
    },
    {
      "name": "xstream",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.4.9-4.3.1"
            }
          ]
        }
      ],
      "release": "manager server 3.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2017:3389-1",
      "fixed_version": "1.4.9-4.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2017:3389-1",
      "provider_updated_at": "2026-02-04T03:46:28.876368Z",
      "applicability_unknown": true
    },
    {
      "name": "xstream",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.4.9-3.3.1"
            }
          ]
        }
      ],
      "release": "manager server 3.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2017:3390-1",
      "fixed_version": "1.4.9-3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2017:3390-1",
      "provider_updated_at": "2026-02-04T03:18:56.223131Z",
      "applicability_unknown": true
    },
    {
      "name": "libxstream-java",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.4.7-1ubuntu0.1"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "1.4.4-1",
        "1.4.7-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2017-7957",
      "fixed_version": "1.4.7-1ubuntu0.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2017-7957",
      "provider_updated_at": "2025-07-16T07:02:15.466661Z",
      "applicability_unknown": true
    },
    {
      "name": "libxstream-java",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.4.8-1ubuntu0.1"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "1.4.8-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2017-7957",
      "fixed_version": "1.4.8-1ubuntu0.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2017-7957",
      "provider_updated_at": "2025-07-16T07:02:15.466661Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #861521]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libxstream-java]Unknown
    Details (2)

    • 1.4.20-1+deb12u1 · all · bookworm

      Fixed · Fixed: 1.4.9-2

      dsa · libxstream-java · debian · bookworm; dsa · libxstream-java · debian · 12

    • 1.4.20-1+deb12u1 · all · bookworm

      Fixed · Fixed: 1.4.9-2

      dsa · libxstream-java · debian · bookworm; dsa · libxstream-java · debian · 12

[Debian 13 (Trixie)]

  • [libxstream-java]Unknown
    Details (2)

    • 1.4.21-1 · all · trixie

      Fixed · Fixed: 1.4.9-2

      dsa · libxstream-java · debian · 13

    • 1.4.21-1 · all · trixie

      Fixed · Fixed: 1.4.9-2

      dsa · libxstream-java · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]