Gentoo Linux Security Advisory 201612-46 - Multiple vulnerabilities have been found in Xerces-C++, the worst of which may allow remote attackers to execute arbitrary code. Versions less than 3.1.4-r1 are affected.
b6ff93ec4cb97c2958a73a0c5f5ec08c5d0a34778de7c0399fc50ae3ea0dd5fe
Debian Linux Security Advisory 3579-1 - Gustavo Grieco discovered an use-after-free vulnerability in xerces-c, a validating XML parser library for C++, due to not properly handling invalid characters in XML input documents in the DTDScanner.
45b6e047db4b73858971629f52ff7aa4053af4847c4a43806674c5fe5dc051ca