ELSA-2018-1779

ELSA-2018-1779 - xmlrpc3 security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2018-05-31

Description

[3.0-4.17]
- Rebase patch to avoid orig files in source JAR
- Related: CVE-2016-5003

[3.0-4.16]
- Disallow deserialization of tags by default
- Resolves: CVE-2016-5003

Related CVEs

CVE-2016-5003

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	xmlrpc3-3.0-4.17.el6_9.src.rpm	fefb7b8fe1c1b4ab0aae1841d5469dce	-
	xmlrpc3-client-3.0-4.17.el6_9.noarch.rpm	6fa14d1cd970f172415e180a412fe3ed	-
	xmlrpc3-client-devel-3.0-4.17.el6_9.noarch.rpm	b7a33afd49591ee1bb5e7c54e6cf59b0	-
	xmlrpc3-common-3.0-4.17.el6_9.noarch.rpm	ca51c5d77278a8ab692905de6d45cca6	-
	xmlrpc3-common-devel-3.0-4.17.el6_9.noarch.rpm	625da128df1485226862fecaff01d015	-
	xmlrpc3-javadoc-3.0-4.17.el6_9.noarch.rpm	6bfcfb853d77bc2508ef8b295f6ac50e	-
	xmlrpc3-server-3.0-4.17.el6_9.noarch.rpm	714e3b6881c5867b1777776e24f245f4	-
	xmlrpc3-server-devel-3.0-4.17.el6_9.noarch.rpm	ae4c49a676d4677e383373f91a8da4ca	-
Oracle Linux 6 (x86_64)	xmlrpc3-3.0-4.17.el6_9.src.rpm	fefb7b8fe1c1b4ab0aae1841d5469dce	-
	xmlrpc3-client-3.0-4.17.el6_9.noarch.rpm	6fa14d1cd970f172415e180a412fe3ed	-
	xmlrpc3-client-devel-3.0-4.17.el6_9.noarch.rpm	b7a33afd49591ee1bb5e7c54e6cf59b0	-
	xmlrpc3-common-3.0-4.17.el6_9.noarch.rpm	ca51c5d77278a8ab692905de6d45cca6	-
	xmlrpc3-common-devel-3.0-4.17.el6_9.noarch.rpm	625da128df1485226862fecaff01d015	-
	xmlrpc3-javadoc-3.0-4.17.el6_9.noarch.rpm	6bfcfb853d77bc2508ef8b295f6ac50e	-
	xmlrpc3-server-3.0-4.17.el6_9.noarch.rpm	714e3b6881c5867b1777776e24f245f4	-
	xmlrpc3-server-devel-3.0-4.17.el6_9.noarch.rpm	ae4c49a676d4677e383373f91a8da4ca	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team