A patch release, 1.5.1, of the XML-Security-C library is now available on
the download site.
http://santuario.apache.org/dist/c-library/
The change log is updated with the issues corrected in this release
including the HMAC security fix and a couple of other reported bugs.
-- Scott
The Apache XML Security team is pleased to announce the release of
version 1.4.3 of the Java xml-security library [1, 2]. This release
provides many bug fixes and a fix for the recently announced HMAC
vulnerability in the XML Signature specification [3]. You should upgrade
to this release as so