-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
The Apache Santuario project has released versions 1.5.5 and 1.4.8 of the XML Security for Java project. These releases contain a fix for a security vulnerability: http://santuario.apache.org/secadv.data/CVE-2013-2172.txt.asc The fixed release is immediately available from http://santuario.apache.org/download.html Thank you to James Forshaw for reporting, and assisting to fix and test, these issues. Colm. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJRyXAUAAoJEGe/gLEK1TmD0AwH+gPHonTTuqSH5o7E0V+crBep J0ZzcsnqkCrnWbwT6HSQO75U133kE9nHRB8W6Zl7BgkPeSQ/WHFNkxwEWIz3K3kA XI/GEyIZACA9q/qfieidtsgKBY/Ah0XM4q2qyUaDXdzhbtGHU+jtpFISaItsxWeH 3orXq5YgpID++5Qf/gNl0vSqdQOrRtpRfhp2XGYycoKml9BMKWBw48OB6oY4zi9s xHZELVwb3Gi7Is6TV0h2rpleqUy+UPMcqki7ZdyLileL0WgI3khTHwE79nUVPqLv C7/lFmIQ04aDbn0iGF3jo4kUUXdv2GVOt9kM6PgR94DXW6ppXENoIB49CNRKGaA= =DOf7 -----END PGP SIGNATURE----- -- Colm O hEigeartaigh Talend Community Coder http://coders.talend.com