Comment 8 for bug 1780844

Revision history for this message
Dan Streetman (ddstreet) wrote :

Xenial:

ubuntu@lp1780844-x:~$ dpkg -l | grep libxstream-java
ii libxstream-java 1.4.8-1 all Java library to serialize objects to XML and back again
ubuntu@lp1780844-x:~$ java -cp /usr/share/java/xstream-1.4.8.jar:. TestCVE
#
# A fatal error has been detected by the Java Runtime Environment:
#
# SIGSEGV (0xb) at pc=0x00007fcba3ec99d2, pid=12644, tid=0x00007fcba55c6700

ubuntu@lp1780844-x:~$ sudo apt-add-repository ppa:ubuntu-security-proposed/ppa
 Pre-release Ubuntu Security Updates that need additional work or testing.
...

ubuntu@lp1780844-x:~$ dpkg -l | grep libxstream-java
ii libxstream-java 1.4.8-1ubuntu0.1 all Java library to serialize objects to XML and back again
ubuntu@lp1780844-x:~$ java -cp /usr/share/java/xstream-1.4.8.jar:. TestCVE
Exception in thread "main" com.thoughtworks.xstream.converters.ConversionException: Type void cannot have an instance

Trusty:

ubuntu@lp1780844-t:~$ dpkg -l | grep libxstream-java
ii libxstream-java 1.4.7-1 all Java library to serialize objects to XML and back again
ubuntu@lp1780844-t:~$ java -cp /usr/share/java/xstream-1.4.7.jar:. TestCVE
#
# A fatal error has been detected by the Java Runtime Environment:
#
# SIGSEGV (0xb) at pc=0x00007f89d9429a32, pid=11183, tid=140230055626496

ubuntu@lp1780844-t:~$ sudo apt-add-repository ppa:ubuntu-security-proposed/ppa
 Pre-release Ubuntu Security Updates that need additional work or testing.
...

ubuntu@lp1780844-t:~$ dpkg -l | grep libxstream-java
ii libxstream-java 1.4.7-1ubuntu0.1 all Java library to serialize objects to XML and back again
ubuntu@lp1780844-t:~$ java -cp /usr/share/java/xstream-1.4.7.jar:. TestCVE
Exception in thread "main" com.thoughtworks.xstream.converters.ConversionException: Type void cannot have an instance