We usually have 1-2 releases a year. I don't believe there is any time
table for the next release.
The fix for this is very simple and in the meantime you could create a
patch and just replace the XMLUtils.class in your xmlsec.jar:
$ svn diff -r792509 XMLUtils.java
Index: XMLUtils.java
=
When is the next release? We are using this jar in a production system and it
would be easier for us to download it from a stable release, than applying
the patch and getting it reviewed.
Aruna
Colm O hEigeartaigh wrote:
>
> This has already been fixed and will be in the next release:
>
> http
This has already been fixed and will be in the next release:
https://issues.apache.org/bugzilla/show_bug.cgi?id=47779
Colm.
-Original Message-
From: ArunaGanesan [mailto:aruna...@gmail.com]
Sent: 12 January 2010 11:07
To: security-dev@xml.apache.org
Subject: Infinite Loop due to inconsi
