diff --git a/gradle.properties b/gradle.properties
index fb93c7b0f56..d2a9455de12 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -131,5 +131,5 @@ xml-apis.version=1.4.01
 xmlgraphics-commons.version=2.6
 xmlpull.version=1.1.3.1
 xpp3_min.version=1.1.4c
-xstream.version=1.4.16
+xstream.version=1.4.17
 wiremock-jre8.version=2.24.1
diff --git a/src/dist/src/dist/expected_release_jars.csv b/src/dist/src/dist/expected_release_jars.csv
index 61822179333..2b087611b9b 100644
--- a/src/dist/src/dist/expected_release_jars.csv
+++ b/src/dist/src/dist/expected_release_jars.csv
@@ -95,4 +95,4 @@
 220536,xml-apis-1.4.01.jar
 674607,xmlgraphics-commons-2.6.jar
 7188,xmlpull-1.1.3.1.jar
-629686,xstream-1.4.16.jar
+629806,xstream-1.4.17.jar
diff --git a/xdocs/changes.xml b/xdocs/changes.xml
index aa03e327878..3428ddf588b 100644
--- a/xdocs/changes.xml
+++ b/xdocs/changes.xml
@@ -132,7 +132,7 @@ Summary
 <ul>
   <li><bug>65128</bug><pr>643</pr>Add missing documentation about <code>Same user on each iteration</code> for Thread Groups. Contributed by njkuzas.</li>
   <li><pr>648</pr>Updated xmlgraphics-commons to 2.6 (from 2.3). Contributed by Stefan Seide (stefan @ trilobyte.se.de)</li>
-  <li><pr>655</pr>Updated x-stream to 1.4.16 (from 1.4.15). Contributed by Stefan Seide (stefan @ trilobyte.se.de)</li>
+  <li><pr>655</pr><pr>667</pr>Updated x-stream to 1.4.17 (from 1.4.15). Contributed by Stefan Seide (stefan @ trilobyte.se.de)</li>
   <li><pr>656</pr>Updated json-smart to 2.4.1 (from 2.3) and accessors-smart to 1.3 (from 1.2). Contributed by Stefan Seide (stefan @ trilobyte.se.de)</li>
   <li><bug>64831</bug>Log truststore entries in debug level for logger <code>org.apache.jmeter.util.keystore.JmeterKeyStore</code></li>
   <li><bug>65232</bug>Hide splash screen when an error is displayed because the test plan could not be parsed.</li>