SECURITY BULLETIN: Xerces library distributed with CMOD v8.5, v9.0, v9.5

[Justin Derrick]

The Xerces library which has shipped with CMOD since version v8.5 has announced a vulnerability that could result in a denial of service, or remote code execution.

CVE:  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0729

IBM Security Bulletin:  https://www-01.ibm.com/support/docview.wss?uid=swg21985363

Fix Central links: CMOD v9.0.0.7   CMOD v9.5.0.6