https://linuxsecurity.com/advisories/deblts/debian-lts-dla-2011-1-xmlrpc-epi-security-update-17-33-44
Component: RPM Packages => SecurityQA Contact: (none) => security
Actual link: https://www.debian.org/lts/security/2019/dla-2011 As you can see in the commit log, I fixed this a long time ago. r1043583 | luigiwalser | 2016-07-24 21:10:43 -0400 (Sun, 24 Jul 2016) | 1 line add patch from php to fix CVE-2016-6296
Summary: xmlrpc-epi security update CVE-2016-6296 => xmlrpc-epi new security issue CVE-2016-6296Resolution: (none) => INVALIDStatus: NEW => RESOLVED