Re: Xerces and security vulnerabilities

"Michael Glavassevich" <[email protected]> Thu, 5 Nov 2015 15:20:25 -0500
Newsgroups gmane.text.xml.xerces-j.user
Message-ID <[email protected]>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DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0NClRvIHVuc3Vic2NyaWJlLCBlLW1haWw6IGotdXNlcnMtdW5z
dWJzY3JpYmVAeGVyY2VzLmFwYWNoZS5vcmcNCkZvciBhZGRpdGlvbmFsIGNvbW1hbmRzLCBl
LW1haWw6IGotdXNlcnMtaGVscEB4ZXJjZXMuYXBhY2hlLm9yZw0K