Apache Roller 6.1.7 fixes 15 security issues, including XXE
Original title: Apache Roller: 15 CVEs fixed in 6.1.7
The Apache Roller PMC published 15 advisories on November 11, 2026, with fixes in release 6.1.7.
Dave posted to oss-security that the Apache Roller PMC published 15 security advisories on November 11, 2026. The fixes are in Apache Roller 6.1.7, with downloads and a changelog linked from the post. The snippet names an XML external entity issue among the advisories.
Unconfirmed: The feed snippet does not list the other 14 issues or affected versions.
- Fifteen advisories were published on November 11, 2026.
- Fixed release named in the post is Apache Roller 6.1.7.
- One issue described is XML external entity processing.
Impact: XML external entity issues among 15 fixed flaws
| Product | Affected | Fixed in |
|---|---|---|
| Apache Roller | — | 6.1.7 |
- 1.Upgrade Apache Roller to 6.1.7.
- Vendors
- Apache
- Products
- Apache Roller
From the original article
Posted by Dave on Nov 11 On 11 November 2026 the Apache Roller PMC published 15 security advisories. https://roller. apache.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.