Apache Roller 5.0.3 security fix release now available
The Apache Roller project has announced the availability of a new Apache Roller 5.0.3 release. This new release is identical to Apache Roller 5.0.2 but includes an updated Apache XML-RPC library that fixes a security vulnerability in Roller's XML-RPC feature.
All Roller sites are urged to upgrade to Roller 5.0.3 as soon as possible. Download Apache Roller 5.0.3 at the Roller downloads page here.
You can find a little more information about the vulnerabilities at the links below:
- The official release announcement: Apache Roller 5.0.3 available & upgrade recommended for all Roller sites
- CVE-2014-0030 Apache Roller XML-RPC susceptible to XML Entended Entity attacks