Great news! Thanks to all who made this happen!
Does the oacs-4-5-beta-1 CVS tag get us the fixed beta1, or the original beta1? I see a fix to packages/acs-tcl/tcl/security-procs.xql dated 13 March which is probably the one you are referring to... but I thought I'd ask... aha... there is a tag oacs-4-5-beta-1-1 which I'll use instead. Looks like it was merged back into oacs-4-5-beta-1 anyway, but I'll play safe and use
oacs-4-5-beta-1-1 for now.
I don't see the info on the new tag posted anywhere yet... hope I'm not just duplicating already known and official info on the CVS tags with this post!