xmltooling patches for 2.5 versions?

[Cantor, Scott]

> I don't suppose there are (or can be? Or will be?) patched versions of
> xmltooling for the 2.5 release? We're still on that one, and upgrading to 2.6 at
> this point is a slightly bigger effort. I'd really rather patch the vulnerability
> quicker than I can upgrade to 2.6.

>From the project itself? Absolutely not. And no, upgrading should be exactly the same effort unless you're building from source, and if you were, you could do the patch yourself.
 
-- Scott