Thank you Scott for the information. We will certainly look at the possibility of upgrading to latest Xerces version.
-- BR, Atul Thosar On 16 June 2015 at 22:42, Cantor, Scott <canto...@osu.edu> wrote: > On 6/16/15, 1:05 PM, "thosaratu...@gmail.com on behalf of Atul Thosar" < > thosaratu...@gmail.com on behalf of atultho...@gmail.com> wrote: > > >Btw Could you please help me to understand in what sense 2.8 is insecure? > > In the sense that it has security bugs that are fixed, such as [1]. There > are undoubtedly others. > > -- Scott > > [1] http://xerces.apache.org/xerces-c/secadv.html >