xml-security-c security uploads

[Scott Cantor]

Russ Allbery wrote on 2009-07-24:
> I'm uploading a 1.4.0-4 package with just the HMAC security fix so that it
> can propagate into testing quickly, in advance of the work to move to
> Shibboleth 2.2.  I'm also going to contact the security team about fixes
> for stable and oldstable.

If you haven't done it already, there's another small patch worth
backporting that improves interop (beyond even Shibboleth). No big deal
either way, but if you want it...

http://svn.apache.org/viewvc/xml/security/trunk/c/src/dsig/DSIGKeyInfoList.c
pp?r1=566299&r2=697216

-- Scott