Red Hat Security Advisory

RHSA-2018:1784

rh-java-common-xmlrpc security update

Released 2018-06-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-java-common-xmlrpc-1:3.1.3-8.16.el6, rh-java-common-xmlrpc-client-1:3.1.3-8.16.el6, rh-java-common-xmlrpc-common-1:3.1.3-8.16.el6 +2
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-java-common-xmlrpc-1:3.1.3-8.16.el7, rh-java-common-xmlrpc-client-1:3.1.3-8.16.el7, rh-java-common-xmlrpc-common-1:3.1.3-8.16.el7 +2
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-java-common-xmlrpc-1:3.1.3-8.16.el6, rh-java-common-xmlrpc-client-1:3.1.3-8.16.el6, rh-java-common-xmlrpc-common-1:3.1.3-8.16.el6 +2
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-java-common-xmlrpc-1:3.1.3-8.16.el7, rh-java-common-xmlrpc-client-1:3.1.3-8.16.el7, rh-java-common-xmlrpc-common-1:3.1.3-8.16.el7 +2
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-java-common-xmlrpc-1:3.1.3-8.16.el7, rh-java-common-xmlrpc-client-1:3.1.3-8.16.el7, rh-java-common-xmlrpc-common-1:3.1.3-8.16.el7 +2
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-java-common-xmlrpc-1:3.1.3-8.16.el7, rh-java-common-xmlrpc-client-1:3.1.3-8.16.el7, rh-java-common-xmlrpc-common-1:3.1.3-8.16.el7 +2
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-java-common-xmlrpc-1:3.1.3-8.16.el6, rh-java-common-xmlrpc-client-1:3.1.3-8.16.el6, rh-java-common-xmlrpc-common-1:3.1.3-8.16.el6 +2
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-java-common-xmlrpc-1:3.1.3-8.16.el7, rh-java-common-xmlrpc-client-1:3.1.3-8.16.el7, rh-java-common-xmlrpc-common-1:3.1.3-8.16.el7 +2

Fixes 1 record

TI-2016-04323 CVE-2016-5003 · GHSA-4gqp-296r-j5mq

The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows…

MEDIUM 58

The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.14876 Published 2017-10-27 Partial fix CWE-502