Re: LICENSE of Apache WSS4J 2.2.5

Hi Justin, Sorry for not replying earlier. I can find the following items, is this what you are referring to? https://github.com/apache/ws-wss4j/tree/master/ws-security-stax/src/main/resources/schemas

[jira] [Resolved] (WSS-677) Comparison in validate class is vulnerable to timing side channels

[ https://issues.apache.org/jira/browse/WSS-677?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh resolved WSS-677. - Resolution: Fixed Thanks for reporting, I have migrated instead to use the JDK

[jira] [Updated] (WSS-677) Comparison in validate class is vulnerable to timing side channels

[ https://issues.apache.org/jira/browse/WSS-677?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh updated WSS-677: Fix Version/s: 2.3.1 2.2.6 > Comparison in validate class is vulnerable to