xerces-j-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Elliotte Rusty Harold <elh...@ibiblio.org>
Subject Re: Denial of service with Xerces?
Date Tue, 11 Aug 2009 13:51:56 GMT
On Mon, Aug 10, 2009 at 10:44 PM, Jeffrey Sinclair<jeff@cooljeff.co.uk> wrote:
> Thanks Michael.
>
> I'm going to see if I can provide feedback to cert.fi. Their original
> vulnerability report suggests that it is a Java problem too. Not only
> have they listed 'all' versions of Xerces but they have also listed the
> JAXP impl bundled in the JDK (which I know is no longer Xerces).
>

Really? Since when. I know it used to be Xerces, and I thought it
still was (modulo Sun patches and repackaging). In what version did
this change?

-- 
Elliotte Rusty Harold
elharo@ibiblio.org

---------------------------------------------------------------------
To unsubscribe, e-mail: j-users-unsubscribe@xerces.apache.org
For additional commands, e-mail: j-users-help@xerces.apache.org


Mime
View raw message