XML-Sig versions 0.27 through 0.67 for Perl incorrectly validates XML files if signatures are omitted. An attacker can remove the signature from the XML document to make it pass the verification check. XML-Sig is a Perl module to validate signatures on XML files. An unsigned XML file should return an error message. The affected versions return true when attempting to validate an XML file that contains no signatures.
Increment Version - Release Version same as 0.37-TRIAL
TBD Update Changes and Increment version
Changes for version 0.37-TRIAL (TRIAL RELEASE)
3c18e4c Update Makefile Version 4936d2d Update Changes and Increment version 51f853d Add more patterns to .gitignore adeb19c Allow you to build XML::Sig from git repo without dzil 2619ba4 Fix issue and add test for InclusiveNamespace in XML 3f06b78 Add extra debugging information f8aef89 remove trailing # on TRANSFORM_C14N 15939af InclusiveNamespaces support from 1d2dac1c3eaa42359899e61323a446d0d0af3e54 accidentally removed