[xml] Denial-Of-service security vulnerability

[Robertis Tongbram <rtongbram gmail com>]

Hi all,

I see that there are 2 vulnerabilities in 2.7.2 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4225
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4226

and 1 in 2.7.0
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3529




Are all these 3 fixed in 2.7.3?

If yes, can somebody point me the bug ID and the fix?


Thanks,
Robertis