On Mon, Aug 10, 2009 at 10:44 PM, Jeffrey Sinclair<j...@cooljeff.co.uk> wrote: > Thanks Michael. > > I'm going to see if I can provide feedback to cert.fi. Their original > vulnerability report suggests that it is a Java problem too. Not only > have they listed 'all' versions of Xerces but they have also listed the > JAXP impl bundled in the JDK (which I know is no longer Xerces). >
Really? Since when. I know it used to be Xerces, and I thought it still was (modulo Sun patches and repackaging). In what version did this change? -- Elliotte Rusty Harold elh...@ibiblio.org --------------------------------------------------------------------- To unsubscribe, e-mail: j-users-unsubscr...@xerces.apache.org For additional commands, e-mail: j-users-h...@xerces.apache.org
