libxmlrpc3-java 3.1.3-9 is marked for autoremoval from testing on 2020-02-14 It is affected by these RC bugs: 949089: libxmlrpc3-java: CVE-2019-17570: deserialization of server-side exception from faultCause in XMLRPC error response