- From: Frederick Hirsch <frederick.hirsch@nokia.com>
- Date: Tue, 14 Jul 2009 15:29:33 -0400
- To: XMLSec WG Public List <public-xmlsec@w3.org>
- Cc: Frederick Hirsch <frederick.hirsch@nokia.com>, ext Aleksey Sanin <aleksey@aleksey.com>
fyi, new XML Security Library 1.2.12 release that addresses HMAC issue (among other changes) Thanks Aleksey. regards, Frederick Frederick Hirsch Nokia Begin forwarded message: > From: "ext xmlsec-request@aleksey.com" <xmlsec-request@aleksey.com> > Date: July 14, 2009 3:00:23 PM EDT > To: "xmlsec@aleksey.com" <xmlsec@aleksey.com> > Subject: xmlsec Digest, Vol 63, Issue 6 > Reply-To: "xmlsec@aleksey.com" <xmlsec@aleksey.com> > > Send xmlsec mailing list submissions to > xmlsec@aleksey.com > > To subscribe or unsubscribe via the World Wide Web, visit > http://www.aleksey.com/mailman/listinfo/xmlsec > or, via email, send a message with subject or body 'help' to > xmlsec-request@aleksey.com > > You can reach the person managing the list at > xmlsec-owner@aleksey.com > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of xmlsec digest..." > ... > Message: 3 > Date: Tue, 14 Jul 2009 11:47:48 -0700 > From: Aleksey Sanin <aleksey@aleksey.com> > Subject: [xmlsec] New xmlsec 1.2.12 release > To: xmlsec@aleksey.com > Message-ID: <4A5CD2D4.1080306@aleksey.com> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > The new XML Security Library 1.2.12 release available at > the usual place: > > http://www.aleksey.com/xmlsec/download.html > > It includes the following changes: > > * Fixed HMAC vulnerability with small values of HMAC > length (CERT VU #466161). For more details, see > http://www.kb.cert.org/vuls/id/466161 > * Added support for the GOST implemented by Russian Crypto > Pro CSP. > * Added an option to return the replaced node. > * Added new function xmlSecNodeEncodeAndSetContent for > encoding special chars in the node content. > * Added configurable Base64 line length. > * Bug fixes. > > Thanks to everyone for the contribution and bug reports! > > Aleksey Sanin > > > > ------------------------------ > > _______________________________________________ > xmlsec mailing list > xmlsec@aleksey.com > http://www.aleksey.com/mailman/listinfo/xmlsec > > > End of xmlsec Digest, Vol 63, Issue 6 > *************************************
Received on Tuesday, 14 July 2009 19:31:01 UTC