The advisory and release notes are now fixed to not describe the XML vulnerabilities as DoS.