Ubuntu Security Notice 5293-1 - Aaron Massey discovered that c3p0 could be made to crash when parsing certain input. An attacker able to modify the application's XML configuration file could cause a denial of service.
e3ad3c51b46aa66cdc3fda5d795ca77cecc6c99bc9d93be6b7d6bdb878753dce