**Issue Overview:**

XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted DTD. (CVE-2016-5002)

**Affected Packages:**

xmlrpc

**Issue Correction:**
Run _yum update xmlrpc_ to update your system.

**New Packages:**

noarch:
    xmlrpc-javadoc-3.1.3-9.amzn2.0.2.noarch
    xmlrpc-common-3.1.3-9.amzn2.0.2.noarch
    xmlrpc-client-3.1.3-9.amzn2.0.2.noarch
    xmlrpc-server-3.1.3-9.amzn2.0.2.noarch

src:
    xmlrpc-3.1.3-9.amzn2.0.2.src

### Additional References

Red Hat: [CVE-2016-5002]()

Mitre: [CVE-2016-5002]()Read More