Changelog for xstream-1.4.9-1.2.noarch.rpm :
Fri Dec 1 13:00:00 2017 mcAATTsuse.com
- fix possible Denial of Service when unmarshalling void.
(CVE-2017-7957, bsc#1070731)
Added:

* 0001-Prevent-deserialization-of-void.patch

Tue Nov 7 13:00:00 2017 jgonzalezAATTsuse.com
- Fix build for JDK9
- Disable javadoc generation (broken for SLE15 and Tumbleweed)
- Add:

* xstream-XSTREAM_1_4_9-jdk9.patch
- Changed:

* build.sh

Tue Apr 5 14:00:00 2016 moioAATTsuse.com
- Require building on Java 8, otherwise the LambdaMapper class is skipped
(issue 30)

Tue Mar 29 14:00:00 2016 moioAATTsuse.com
- Upgrade to version 1.4.9, which fixes CVE-2016-3674 (bsc#972950)

Tue Nov 10 13:00:00 2015 moioAATTsuse.com
- Initial version