Package: ftp.debian.org Severity: normal Dear ftp team, please remove libxmlrpc3-java from Debian. The package is no longer actively maintained by upstream and affected by CVE-2019-17570. There are no reverse-dependencies. Regards, Markus