[xml] Fix for CVE-2012-5134

[David Dillard <ddillard symantec com>]

Hi,

I was wondering if and when the project plans on making a release to address CVE-2012-5134 (see 
http://www.cvedetails.com/cve/CVE-2012-5134/).  Red Hat has made a patch to address this issue (see 
https://rhn.redhat.com/errata/RHSA-2012-1512.html), but I'd prefer an official patch from the project if 
possible.



Thanks,

David