Re: Xerces and security vulnerabilities

"Michael Glavassevich" <[email protected]> Thu, 5 Nov 2015 16:20:16 -0500
Newsgroups gmane.text.xml.xerces-j.user
Message-ID <[email protected]>
VXBkYXRpbmcgSklSQSAoZS5nLiBtYXJraW5nIGlzc3VlcyByZXNvbHZlZCBpbiAyLjEyPyksIHdy
aXRpbmcgdGhlIHJlbGVhc2UgDQpub3RlcyBhbmQgd2Vic2l0ZSB1cGRhdGVzIGZvciBzdGFydGVy
cy4uLiBKdXN0IG5ldmVyIGZpbmQgdGhlIHRpbWUgdG8gDQpzdGFydCBwdXNoaW5nIHRob3NlIGZv
cndhcmQuDQoNCk1pY2hhZWwgR2xhdmFzc2V2aWNoDQpYTUwgVGVjaG5vbG9naWVzIGFuZCBXQVMg
RGV2ZWxvcG1lbnQNCklCTSBUb3JvbnRvIExhYg0KRS1tYWlsOiBtcmdsYXZhc0BjYS5pYm0uY29t
DQpFLW1haWw6IG1yZ2xhdmFzQGFwYWNoZS5vcmcNCg0KR2FyeSBHcmVnb3J5IDxnYXJ5ZGdyZWdv
cnlAZ21haWwuY29tPiB3cm90ZSBvbiAxMS8wNS8yMDE1IDAzOjQzOjMzIFBNOg0KIA0KPiBXaGF0
IGtpbmQgb2YgaGVscCBkbyB5b3UgbmVlZD8NCj4gR2FyeQ0KPiBPbiBOb3YgNSwgMjAxNSAxMjoy
MCBQTSwgIk1pY2hhZWwgR2xhdmFzc2V2aWNoIiA8bXJnbGF2YXNAY2EuaWJtLmNvbT4gDQp3cm90
ZToNCj4gWWVzLCBidXQgbmVlZCBoZWxwIGZyb20gdm9sdW50ZWVycyB3aXRoIG1vcmUgdGltZSB0
byBwcmVwYXJlIGEgWGVyY2VzDQo+IHJlbGVhc2UuDQo+IA0KPiBBbmQgc2hvdWxkIHByb2JhYmx5
IGFsc28gaGF2ZSBhbiB4bWwtY29tbW9ucyByZWxlYXNlICh0byBpbmNsdWRlIGluDQo+IFhlcmNl
cykgdGhhdCBjb250YWlucyB0aGlzOg0KPiBodHRwOi8vc3ZuLmFwYWNoZS5vcmcvdmlld3ZjP3Zp
ZXc9cmV2aXNpb24mcmV2aXNpb249MTM1NzQ0Mw0KPiANCj4gU2ltaWxhciBoYXNoIGNvbGxpc2lv
biBmaXggYXMgdGhlIG9uZXMgaW1wbGVtZW50ZWQgaW4gWGVyY2VzLg0KPiANCj4gVGhhbmtzLg0K
PiANCj4gTWljaGFlbCBHbGF2YXNzZXZpY2gNCj4gWE1MIFRlY2hub2xvZ2llcyBhbmQgV0FTIERl
dmVsb3BtZW50DQo+IElCTSBUb3JvbnRvIExhYg0KPiBFLW1haWw6IG1yZ2xhdmFzQGNhLmlibS5j
b20NCj4gRS1tYWlsOiBtcmdsYXZhc0BhcGFjaGUub3JnDQo+IA0KPiBHYXJ5IEdyZWdvcnkgPGdn
cmVnb3J5QHJvY2tldHNvZnR3YXJlLmNvbT4gd3JvdGUgb24gMTEvMDUvMjAxNSAxMjo0MzoyMw0K
PiBQTToNCj4gDQo+ID4gQW55IHRob3VnaHRzIG9uIHB1c2hpbmcgb3V0IGEgcmVsZWFzZSB0byBw
aWNrIHVwIHRoZSBvbmUgZml4PyAoQW5kDQo+ID4gd2hhdGV2ZXIgZWxzZSBpcyBpbiB0cnVuayBz
aW5jZSAyLjExKQ0KPiA+IEdhcnkNCj4gPg0KPiA+DQo+IA0KPiA+IE9uIFRodSwgTm92IDUsIDIw
MTUgYXQgOToxNCBBTSAtMDgwMCwgIk1pY2hhZWwgR2xhdmFzc2V2aWNoIiA8DQo+ID4gbXJnbGF2
YXNAY2EuaWJtLmNvbT4gd3JvdGU6DQo+IA0KPiA+IFBldGVyIE1ham9yIDxwZXRlci5tYWpvckBm
b3JnZXJvY2suY29tPiB3cm90ZSBvbiAxMS8wNS8yMDE1IDAyOjI0OjU4IA0KQU06DQo+ID4NCj4g
PiA+IEhvdyBhYm91dCB0aGVzZSB0aGVuPw0KPiA+ID4gaHR0cHM6Ly9idWd6aWxsYS5yZWRoYXQu
Y29tL3Nob3dfYnVnLmNnaT9pZD0xMjczNjM4DQo+ID4NCj4gPiBYZXJjZXMgZG9lc24ndCBzdXBw
b3J0IHRoYXQgcHJvcGVydHkuDQo+ID4NCj4gPiA+IGh0dHBzOi8vYnVnemlsbGEucmVkaGF0LmNv
bS9zaG93X2J1Zy5jZ2k/aWQ9MTI3MzY0NQ0KPiA+DQo+ID4gWGVyY2VzIGRvZXNuJ3QgaGF2ZSBh
IFN0QVggWE1MIHBhcnNlci4NCj4gPg0KPiA+ID4gaHR0cHM6Ly9idWd6aWxsYS5yZWRoYXQuY29t
L3Nob3dfYnVnLmNnaT9pZD0xMjczNjM3DQo+ID4NCj4gPiBUaGUgcG9ydGlvbiBvZiB0aGUgaGFz
aGluZyBjb2xsaXNpb24gaXNzdWUgdGhhdCBhcHBsaWVzIHRvIFhlcmNlcyBpcw0KPiBmaXhlZA0K
PiA+IG9uIHRoZSB0cnVuayAoaW4gb3RoZXIgd29yZHMsIGFmdGVyIFhlcmNlcyAyLjExLjApLiBT
ZWU6DQo+ID4gaHR0cDovL3N2bi5hcGFjaGUub3JnL3ZpZXd2Yz92aWV3PXJldmlzaW9uJnJldmlz
aW9uPTEzNTczODEuDQo+ID4NCj4gPiBUaGUgcmVzdCBvZiB0aGUgaGFzaGluZyBpc3N1ZSBpcyBp
biB0aGUgSmF2YSBwbGF0Zm9ybSBpdHNlbGYuIFNlZQ0KPiA+IGh0dHA6Ly9vcGVuamRrLmphdmEu
bmV0L2plcHMvMTgwLg0KPiA+DQo+ID4gPiAyMDE1LiAxMS4gMDQuIDE2OjM4IGtlbHRleqimc3Nl
bCwgTWljaGFlbCBHbGF2YXNzZXZpY2ggqKpydGE6DQo+ID4gPiA+IEFzIHRoZXkgZGlkIG5vdCBk
aXNjbG9zZSBhbnkgZGV0YWlscyBpbiB0aGVzZSByZXBvcnRzLCBvbmx5IE9yYWNsZQ0KPiA+IHdv
dWxkDQo+ID4gPiA+IGtub3cuDQo+ID4gPiA+DQo+ID4gPiA+IFRoYW5rcy4NCj4gPiA+ID4NCj4g
PiA+ID4gTWljaGFlbCBHbGF2YXNzZXZpY2gNCj4gPiA+ID4gWE1MIFRlY2hub2xvZ2llcyBhbmQg
V0FTIERldmVsb3BtZW50DQo+ID4gPiA+IElCTSBUb3JvbnRvIExhYg0KPiA+ID4gPiBFLW1haWw6
IG1yZ2xhdmFzQGNhLmlibS5jb20NCj4gPiA+ID4gRS1tYWlsOiBtcmdsYXZhc0BhcGFjaGUub3Jn
DQo+ID4gPiA+DQo+ID4gPiA+IFBldGVyIE1ham9yIDxwZXRlci5tYWpvckBmb3JnZXJvY2suY29t
PiB3cm90ZSBvbiAxMS8wNC8yMDE1IA0KMDM6MzY6MjYNCj4gDQo+ID4gQU06DQo+ID4gPiA+DQo+
ID4gPiA+PiBIaSwNCj4gPiA+ID4+DQo+ID4gPiA+PiBpdCBhcHBlYXJzIHRoYXQgT3JhY2xlIGhh
cyBmaXhlZCBzb21lIFhNTCBwYXJzaW5nIHJlbGF0ZWQgDQpzZWN1cml0eQ0KPiA+ID4gPj4gdnVs
bmVyYWJpbGl0aWVzOg0KPiA+ID4gPj4gaHR0cDovL2N2ZS5taXRyZS5vcmcvY2dpLWJpbi9jdmVu
YW1lLmNnaT9uYW1lPUNWRS0yMDE1LTQ4MDMNCj4gPiA+ID4+IGh0dHA6Ly9jdmUubWl0cmUub3Jn
L2NnaS1iaW4vY3ZlbmFtZS5jZ2k/bmFtZT1DVkUtMjAxNS00ODkzDQo+ID4gPiA+PiBodHRwOi8v
Y3ZlLm1pdHJlLm9yZy9jZ2ktYmluL2N2ZW5hbWUuY2dpP25hbWU9Q1ZFLTIwMTUtNDkxMQ0KPiA+
ID4gPj4NCj4gPiA+ID4+IElzIGl0IHBvc3NpYmxlIHRoYXQgdGhlc2UgYWxzbyBhZmZlY3QgWGVy
Y2VzIDIuMTEuMD8NCj4gPiA+ID4+DQo+ID4gPiA+PiBSZWdhcmRzLA0KPiA+ID4gPj4gUGV0ZXIN
Cj4gPiA+DQo+ID4gPiANCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiA+ID4gVG8gdW5zdWJzY3JpYmUsIGUtbWFp
bDogai11c2Vycy11bnN1YnNjcmliZUB4ZXJjZXMuYXBhY2hlLm9yZw0KPiA+ID4gRm9yIGFkZGl0
aW9uYWwgY29tbWFuZHMsIGUtbWFpbDogai11c2Vycy1oZWxwQHhlcmNlcy5hcGFjaGUub3JnDQo+
ID4NCj4gPiBNaWNoYWVsIEdsYXZhc3NldmljaA0KPiA+IFhNTCBUZWNobm9sb2dpZXMgYW5kIFdB
UyBEZXZlbG9wbWVudA0KPiA+IElCTSBUb3JvbnRvIExhYg0KPiA+IEUtbWFpbDogbXJnbGF2YXNA
Y2EuaWJtLmNvbQ0KPiA+IEUtbWFpbDogbXJnbGF2YXNAYXBhY2hlLm9yZw0KPiA+DQo+ID4NCj4g
Pg0KPiA+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiA+IFRvIHVuc3Vic2NyaWJlLCBlLW1haWw6IGotdXNlcnMt
dW5zdWJzY3JpYmVAeGVyY2VzLmFwYWNoZS5vcmcNCj4gPiBGb3IgYWRkaXRpb25hbCBjb21tYW5k
cywgZS1tYWlsOiBqLXVzZXJzLWhlbHBAeGVyY2VzLmFwYWNoZS5vcmcNCj4gDQo+ID4gPT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT0NCj4gPiBSb2NrZXQgU29mdHdhcmUsIEluYy4gYW5k
IHN1YnNpZGlhcmllcyCh9iA3NyBGb3VydGggQXZlbnVlLCBXYWx0aGFtDQo+ID4gTUEgMDI0NTEg
ofYgKzEgODAwLjk2Ni4zMjcwIKH2ICsxIDc4MS41NzcuNDMyMQ0KPiA+IFVuc3Vic2NyaWJlIEZy
b20gQ29tbWVyY2lhbCBFbWFpbCCoQyB1bnN1YnNjcmliZUByb2NrZXRzb2Z0d2FyZS5jb20NCj4g
PiBNYW5hZ2UgWW91ciBTdWJzY3JpcHRpb24gUHJlZmVyZW5jZXMgLSBodHRwOi8vDQo+ID4gaW5m
by5yb2NrZXRzb2Z0d2FyZS5jb20vDQo+ID4gR2xvYmFsU3Vic2NyaXB0aW9uTWFuYWdlbWVudEVt
YWlsRm9vdGVyX1N1YnNjcmlwdGlvbkNlbnRlci5odG1sDQo+ID4gUHJpdmFjeSBQb2xpY3kgLQ0K
PiBodHRwOi8vd3d3LnJvY2tldHNvZnR3YXJlLmNvbS9jb21wYW55L2xlZ2FsL3ByaXZhY3ktcG9s
aWN5DQo+ID4gPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCj4gPg0KPiA+IFRoaXMg
Y29tbXVuaWNhdGlvbiBhbmQgYW55IGF0dGFjaG1lbnRzIG1heSBjb250YWluIGNvbmZpZGVudGlh
bA0KPiA+IGluZm9ybWF0aW9uIG9mIFJvY2tldCBTb2Z0d2FyZSwgSW5jLiBBbGwgdW5hdXRob3Jp
emVkIHVzZSwNCj4gPiBkaXNjbG9zdXJlIG9yIGRpc3RyaWJ1dGlvbiBpcyBwcm9oaWJpdGVkLiBJ
ZiB5b3UgYXJlIG5vdCB0aGUNCj4gPiBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkg
Um9ja2V0IFNvZnR3YXJlIGltbWVkaWF0ZWx5IGFuZA0KPiA+IGRlc3Ryb3kgYWxsIGNvcGllcyBv
ZiB0aGlzIGNvbW11bmljYXRpb24uIFRoYW5rIHlvdS4NCg0KDQo=

DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0NClRvIHVuc3Vic2NyaWJlLCBlLW1haWw6IGotdXNlcnMtdW5z
dWJzY3JpYmVAeGVyY2VzLmFwYWNoZS5vcmcNCkZvciBhZGRpdGlvbmFsIGNvbW1hbmRzLCBl
LW1haWw6IGotdXNlcnMtaGVscEB4ZXJjZXMuYXBhY2hlLm9yZw0K