SUSE-SU-2026:3572-1

Опубликовано: 11 авг. 2026

Источник: suse-cvrf

Описание

Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue:

CVE-2026-15928: reflected cross-site scripting (XSS) via HTML injection in the error page component (bsc#1272769).

libxmlrpc3-1.51.07-150400.3.3.1

libxmlrpc_client3-1.51.07-150400.3.3.1

libxmlrpc_util4-1.51.07-150400.3.3.1

libxmlrpc++8-1.51.07-150400.3.3.1

libxmlrpc_abyss++8-1.51.07-150400.3.3.1

libxmlrpc_abyss3-1.51.07-150400.3.3.1

libxmlrpc_client++8-1.51.07-150400.3.3.1

libxmlrpc_cpp8-1.51.07-150400.3.3.1

libxmlrpc_packetsocket8-1.51.07-150400.3.3.1

libxmlrpc_server++8-1.51.07-150400.3.3.1

libxmlrpc_server3-1.51.07-150400.3.3.1

libxmlrpc_server_abyss++8-1.51.07-150400.3.3.1

libxmlrpc_server_abyss3-1.51.07-150400.3.3.1

libxmlrpc_server_cgi++8-1.51.07-150400.3.3.1

libxmlrpc_server_cgi3-1.51.07-150400.3.3.1

libxmlrpc_server_pstream++8-1.51.07-150400.3.3.1

libxmlrpc_util++8-1.51.07-150400.3.3.1

xmlrpc-c-devel-1.51.07-150400.3.3.1

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

SUSE Linux Enterprise Module for Basesystem 15 SP7:libxmlrpc3-1.51.07-150400.3.3.1

SUSE Linux Enterprise Module for Basesystem 15 SP7:libxmlrpc_client3-1.51.07-150400.3.3.1

SUSE Linux Enterprise Module for Basesystem 15 SP7:libxmlrpc_util4-1.51.07-150400.3.3.1

SUSE Linux Enterprise Module for Package Hub 15 SP7:libxmlrpc++8-1.51.07-150400.3.3.1