Xerces and security vulnerabilities

Peter Major <[email protected]> Wed, 4 Nov 2015 08:36:26 +0000

Newsgroups	gmane.text.xml.xerces-j.user
Message-ID	<[email protected]>

Hi,

it appears that Oracle has fixed some XML parsing related security 
vulnerabilities:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4803
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4893
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4911

Is it possible that these also affect Xerces 2.11.0?

Regards,
Peter