Changelog for xstream-1.4.9-1.2.noarch.rpm :

* Fri Dec 01 2017 mcAATTsuse.com- fix possible Denial of Service when unmarshalling void. (CVE-2017-7957, bsc#1070731) Added:
* 0001-Prevent-deserialization-of-void.patch
* Tue Nov 07 2017 jgonzalezAATTsuse.com- Fix build for JDK9- Disable javadoc generation (broken for SLE15 and Tumbleweed)- Add:
* xstream-XSTREAM_1_4_9-jdk9.patch- Changed:
* build.sh
* Tue Apr 05 2016 moioAATTsuse.com- Require building on Java 8, otherwise the LambdaMapper class is skipped (issue 30)
* Tue Mar 29 2016 moioAATTsuse.com- Upgrade to version 1.4.9, which fixes CVE-2016-3674 (bsc#972950)
* Tue Nov 10 2015 moioAATTsuse.com- Initial version