c3p0 vulnerability

USN-5293-1 fixed a vulnerability in c3p0.
This update provides the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

Aaron Massey discovered that c3p0 could be made to crash when
parsing certain input. An attacker able to modify the application’s
XML configuration file could cause a denial of service.