taglib 1.7.1 is a bugfix release that fixes three CVEs: CVE-2012-1107 - https://bugzilla.redhat.com/show_bug.cgi?id=800553 CVE-2012-1108 - https://bugzilla.redhat.com/show_bug.cgi?id=800559 CVE-2012-1584 - https://bugzilla.redhat.com/show_bug.cgi?id=810009 Confirmed that it builds, installs, and works locally.