- What: Security update for xmlrpc-c
- Impact: Addresses vulnerabilities in XML-RPC protocol implementation
Red Hat Product Errata RHSA-2026:61315 - Security Advisory Issued: 2026-08-31 Updated: 2026-08-31 RHSA-2026:61315 - Security Advisory Overview Updated Packages Synopsis Important: xmlrpc-c security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for xmlrpc-c is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML. Security Fix(es): xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component (CVE-2026-15928) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2507394 - CVE-2026-15928 xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component CVEs CVE-2026-15928 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM xmlrpc-c-1.51.0-16.el9_6.1.src.rpm SHA-256: 4988e942f7278a4d431d8f7ea12ed871d056ce74adee22f33ca7a27e3629ec8c x86_64 xmlrpc-c-1.51.0-16.el9_6.1.i686.rpm SHA-256: b1ac8441753d67f379c77409904a3181a39f350666c3e3d5b42758fe040db5c6 xmlrpc-c-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: 09d3d2e63a5c9d9e71c4cf4992c01bfa2c1731f2616f7f8e3dc5423f68382c2a xmlrpc-c-apps-debuginfo-1.51.0-16.el9_6.1.i686.rpm SHA-256: b486217464b2eb9c459337f748e40df1dfaac4065dc2f7dc50bf50651c2fe38b xmlrpc-c-apps-debuginfo-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: 1251cafd69aefd12b0a7cb72afb06f5bb38fe400f4517877c6e14f28b6ef4e28 xmlrpc-c-c++-debuginfo-1.51.0-16.el9_6.1.i686.rpm SHA-256: fe045442c5e78a49df0ae74b9e4a5d757b76b8034010a44a11146bbd7c649c6e xmlrpc-c-c++-debuginfo-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: f0625b39101d86ce35ef44f9b56ec600393c3c1cc6cd1462168aa7b9ae9c1e04 xmlrpc-c-client++-debuginfo-1.51.0-16.el9_6.1.i686.rpm SHA-256: 098de5f1aa68b2f8754ceace06154019c631f45449df095e7d4a0c2076774b74 xmlrpc-c-client++-debuginfo-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: 1bf409b21f7ccabda9b823223f2f7f64c2583579772511facb08f9f40f855a17 xmlrpc-c-client-1.51.0-16.el9_6.1.i686.rpm SHA-256: 7dc0b0d656f559dfc8a09ad332d9b986f7d31398271edfd493f9088dbfa54e6d xmlrpc-c-client-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: cd160e72b79f8eef38e084aca1a4e1f2015052f9e355a829502ee1444f52fde1 xmlrpc-c-client-debuginfo-1.51.0-16.el9_6.1.i686.rpm SHA-256: f1a1d425ba152a560fd24900d9ce07adc112fa9647185c7216d6254e721f5635 xmlrpc-c-client-debuginfo-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: 0f480f06e37f24fe3ea48ac3e043661b785b713a543af377c4168d213ddae21a xmlrpc-c-debuginfo-1.51.0-16.el9_6.1.i686.rpm SHA-256: d9190ce5ec5b7a799b184ad53f3fa91879db27bb083254b17abcb84d21c4bdb4 xmlrpc-c-debuginfo-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: b7685710abd6acad43614625cdeb0e5f52b1a2660dea7b8f8f1e341f034be969 xmlrpc-c-debugsource-1.51.0-16.el9_6.1.i686.rpm SHA-256: 8a3cb2c67fbf4ebb86715b2ac77978ec0000f404396db6186091ef8352d16b0e xmlrpc-c-debugsource-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: 3a38c61c230acbc8a05d1c12a818a3e39234010ae81b4ffa5ab96ff026b89679 Red Hat Enterprise Linux Server - AUS 9.6 SRPM xmlrpc-c-1.51.0-16.el9_6.1.src.rpm SHA-256: 4988e942f7278a4d431d8f7ea12ed871d056ce74adee22f33ca7a27e3629ec8c x86_64 xmlrpc-c-1.51.0-16.el9_6.1.i686.rpm SHA-256: b1ac8441753d67f379c77409904a3181a39f350666c3e3d5b42758fe040db5c6 xmlrpc-c-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: 09d3d2e63a5c9d9e71c4cf4992c01bfa2c1731f2616f7f8e3dc5423f68382c2a xmlrpc-c-apps-debuginfo-1.51.0-16.el9_6.1.i686.rpm SHA-256: b486217464b2eb9c459337f748e40df1dfaac4065dc2f7dc50bf50651c2fe38b xmlrpc-c-apps-debuginfo-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: 1251cafd69aefd12b0a7cb72afb06f5bb38fe400f4517877c6e14f28b6ef4e28 xmlrpc-c-c++-debuginfo-1.51.0-16.el9_6.1.i686.rpm SHA-256: fe045442c5e78a49df0ae74b9e4a5d757b76b8034010a44a11146bbd7c649c6e xmlrpc-c-c++-debuginfo-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: f0625b39101d86ce35ef44f9b56ec600393c3c1cc6cd1462168aa7b9ae9c1e04 xmlrpc-c-client++-debuginfo-1.51.0-16.el9_6.1.i686.rpm SHA-256: 098de5f1aa68b2f8754ceace06154019c631f45449df095e7d4a0c2076774b74 xmlrpc-c-client++-debuginfo-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: 1bf409b21f7ccabda9b823223f2f7f64c2583579772511facb08f9f40f855a17 xmlrpc-c-client-1.51.0-16.el9_6.1.i686.rpm SHA-256: 7dc0b0d656f559dfc8a09ad332d9b986f7d31398271edfd493f9088dbfa54e6d xmlrpc-c-client-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: cd160e72b79f8eef38e084aca1a4e1f2015052f9e355a829502ee1444f52fde1 xmlrpc-c-client-debuginfo-1.51.0-16.el9_6.1.i686.rpm SHA-256: f1a1d425ba152a560fd24900d9ce07adc112fa9647185c7216d6254e721f5635 xmlrpc-c-client-debuginfo-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: 0f480f06e37f24fe3ea48ac3e043661b785b713a543af377c4168d213ddae21a xmlrpc-c-debuginfo-1.51.0-16.el9_6.1.i686.rpm SHA-256: d9190ce5ec5b7a799b184ad53f3fa91879db27bb083254b17abcb84d21c4bdb4 xmlrpc-c-debuginfo-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: b7685710abd6acad43614625cdeb0e5f52b1a2660dea7b8f8f1e341f034be969 xmlrpc-c-debugsource-1.51.0-16.el9_6.1.i686.rpm SHA-256: 8a3cb2c67fbf4ebb86715b2ac77978ec0000f404396db6186091ef8352d16b0e xmlrpc-c-debugsource-1.51.0-16.el9_6.1.x86_64.rpm SHA-256: 3a38c61c230acbc8a05d1c12a818a3e39234010ae81b4ffa5ab96ff026b89679 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM xmlrpc-c-1.51.0-16.el9_6.1.src.rpm SHA-256: 4988e942f7278a4d431d8f7ea12ed871d056ce74adee22f33ca7a27e3629ec8c s390x xmlrpc-c-1.51.0-16.el9_6.1.s390x.rpm SHA-256: f00b157fb9d34169e1514f0644ecd00f7d95b5d0e3e3522234c1b17ffedd0108 xmlrpc-c-apps-debuginfo-1.51.0-16.el9_6.1.s390x.rpm SHA-256: 664e1cc8084374265b6ead03fe3e29442d1f7825984a7e3b78c6cafa4f059a7b xmlrpc-c-c++-debuginfo-1.51.0-16.el9_6.1.s390x.rpm SHA-256: e01981e932b355db550354d455777b66408b7b4563880fa0877b6ccfd599dae4 xmlrpc-c-client++-debuginfo-1.51.0-16.el9_6.1.s390x.rpm SHA-256: 3d5741160782bbefd1ece59f48097abf0f0f014e07dfb418e4bb0b63a371ceed xmlrpc-c-client-1.51.0-16.el9_6.1.s390x.rpm SHA-256: 37759fc9796e622e17ead26c480856dd22079f51d287236b64cdd5424b16ba4c xmlrpc-c-client-debuginfo-1.51.0-16.el9_6.1.s390x.rpm SHA-256: c7cb535d451673bf024e348cf8a4c6d1fd149f4620e9d772b86eece9823b5f2f xmlrpc-c-debuginfo-1.51.0-16.el9_6.1.s390x.rpm SHA-256: c2477809acf6ffe08eece1b22f55ef2b41c32e0240a48800cba4401cf719bef9 xmlrpc-c-debugsource-1.51.0-16.el9_6.1.s390x.rpm SHA-256: 216d63fefea9ca37fed6a12bfabf6d897ff6a85f4f58d2c288a7bfdf0ccf5313 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM xmlrpc-c-1.51.0-16.el9_6.1.src.rpm SHA-256: 4988e942f7278a4d431d8f7ea12ed871d056ce74adee22f33ca7a27e3629ec8c ppc64le xmlrpc-c-1.51.0-16.el9_6.1.ppc64le.rpm SHA-256: dd3148d02bc13fd89d6a5a004f74eeb284f1c9f1f15a059f1ab660aea4c84e6e xmlrpc-c-apps-debuginfo-1.51.0-16.el9_6.1.ppc64le.rpm SHA-256: dca2b94730b7c18bc07228c57b4163759c98620ebed431320a53e7971a68f7f8 xmlrpc-c-c++-debuginfo-1.51.0-16.el9_6.1.ppc64le.rpm SHA-256: f09ea4a4d35225e07b5f5fa6de486ddede44a652fa6535d2421a0110a8ce87d6 xmlrpc-c-client++-debuginfo-1.51.0-16.el9_6.1.ppc64le.rpm SHA-256: 49e684912735605e893da26eca2fe64276e78c79175fd27c03ced10172a48fdc xmlrpc-c-client-1.51.0-16.el9_6.1.ppc64le.rpm SHA-256: 27f44129c15ad5069c432d2730579acfc35dfc4684671235459e3926797ba0c1 xmlrpc-c-client-debuginfo-1.51.0-16.el9_6.1.ppc64le.rpm SHA-256: cf7f5a40caa3988bdf9b6157c7c0c7fa99a8c6320d559e23328e4d735e820545 xmlrpc-c-debuginfo-1.51.0-16.el9_6.1.ppc64le.rpm SHA-256: 9d81e81d071cc41b10f905f49415aaff91bf5acc26626c77cb0b691f62dbc355 xmlrpc-c-debugsource-1.51.0-16.el9_6.1.ppc64le.rpm SHA-256: 4f9943718f40d18efd5032486f3264595123c2cbafaecc6f85a10c19996daf55 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 SRPM xmlrpc-c-1.51.0-16.el9_6.1.src.rpm SHA-256: 4988e9