A new Debian Linux update has been published: DLA 2078-1: libxmlrpc3-java security update
A libxmlrpc3-java security update for Debian GNU/Linux 8 LTS to address an untrusted deserialization in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library.Read more @ Linux Compatible