Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Red Hat Enterprise Linux 7: RHSA-2018-2317-01 Moderate XML-RPC Security

red hat
Calendar Grey July 31, 2018
Scroller Redhat
Classified as Moderate, this update for xmlrpc resolves security vulnerabilities for Red Hat Virtualization 4 on Linux 7. Discover more details today.
An update for xmlrpc is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Summary

XML-RPC is a way to make remote procedure calls over the Internet. It converts procedure calls into XML documents, sends them to a remote server using the HTTP protocol, and gets back the response as XML.
The following packages have been upgraded to a later upstream version: xmlrpc (3.1.3). (BZ#1594618)
Security Fix(es):
* xmlrpc: Deserialization of untrusted Java object through tag (CVE-2016-5003)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Topics%20covered

Topics Covered

security advisory moderate update vulnerability security impact red hat enterprise xmlrpc

References

https://access.redhat.com/security/cve/CVE-2016-5003 https://access.redhat.com/security/updates/classification/#moderate

Package List

Tools for RHV Engine:
Source: xmlrpc-3.1.3-9.el7_5.src.rpm
noarch: xmlrpc-client-3.1.3-9.el7_5.noarch.rpm xmlrpc-common-3.1.3-9.el7_5.noarch.rpm xmlrpc-javadoc-3.1.3-9.el7_5.noarch.rpm xmlrpc-server-3.1.3-9.el7_5.noarch.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/


Advisory ID: RHSA-2018:2317-01
Product: Red Hat Virtualization
Advisory URL: https://access.redhat.com/errata/RHSA-2018:2317
Issue date: 2018-07-31

Topic

An update for xmlrpc is now available for Red Hat Virtualization 4 for RedHat Enterprise Linux 7.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory moderate update vulnerability security impact red hat enterprise xmlrpc

Relevant Releases Architectures

Tools for RHV Engine - noarch

Bugs Fixed

1508123 - CVE-2016-5003 xmlrpc: Deserialization of untrusted Java object through tag

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.