-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 07 Jan 2023 19:04:53 +0100 Source: xml-security-c Architecture: source Version: 2.0.4-2 Distribution: unstable Urgency: medium Maintainer: Debian Shib Team <pkg-shibboleth-devel@lists.alioth.debian.org> Changed-By: Ferenc Wágner <wferi@debian.org> Changes: xml-security-c (2.0.4-2) unstable; urgency=medium . * [b474d78] Revert "Enable XPath/XSLT support via Xalan" Upstream strongly recommends building without Xalan support to reduce the attack surface of Shibboleth installations, because Xalan is dead upstream and pulling it in carries a considerable risk. The Shibboleth stack is the only known consumer of the xml-security-c library in Debian, so we follow upstream's recommendation. * [96a3e92] Update Standards-Version to 4.6.2 (no changes required) * [c251283] Since version 2.0.3 --disable-static is the upstream default * [4fbcaf5] Update debian/* copyright year Checksums-Sha1: f9d807508674c01f592716ca580db507e9d178cf 2589 xml-security-c_2.0.4-2.dsc 7c1abea486cbb5a2d2d07d79a9e4d681f087a8d6 17116 xml-security-c_2.0.4-2.debian.tar.xz 8153069e8cfe0bcbc9b9d2d033edd905c4564a48 8071 xml-security-c_2.0.4-2_amd64.buildinfo Checksums-Sha256: 29dca188dbb638f391b161e2961f11ab9cb6fe96cb41cfaa6f065d9f91faff8b 2589 xml-security-c_2.0.4-2.dsc 87a8394d52f43989aaa02f4a87fc318241d9e85c5e9379201f071215bb5d51c4 17116 xml-security-c_2.0.4-2.debian.tar.xz 4f15564227f190600de49baf67795b5c96ada3bea0dedae4cd147d4652eee3cf 8071 xml-security-c_2.0.4-2_amd64.buildinfo Files: d79563e47d72d5754102beb6babd8c2a 2589 libs optional xml-security-c_2.0.4-2.dsc 0e32fadb3f7c0c82896054b8849945f8 17116 libs optional xml-security-c_2.0.4-2.debian.tar.xz 8c6cf5760a704bbe61f085426a596b02 8071 libs optional xml-security-c_2.0.4-2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEEwddEx0RNIUL7eugtOsj3Fkd+2yMFAmO5v74RHHdmZXJpQGRl Ymlhbi5vcmcACgkQOsj3Fkd+2yN+fQ//cxQuOs6WfzFWppDHFO2HY0G2/wCzSt3Z Um/LeI1S0mH3953j4ZNCkBGQ60Oyz8Ghvg/4ejILiDAb3+i4kEmEaqqDFLHjRZYm Ar8G/7F26RVNEwFB2qbW9PkQmKaNWpyZ8yTtkRnS8pSoC36txS64kfwyjL+R74Kb PLviVMvkMwUMHnOOp+E5zAMXz5+WJhW6/IFpS1/zY+Wt9BXsWs7VtrNNZXRKbq6p 4XdTWd9rFajjcvXiPWG8M4LnkPEPlkyb3q2dJYYB+klmmLJuhKJTPYHifu5G80of OVWLlQlHbS5+c5Y9JWThIoRZhZS0xyJFekpk6jWqeby+K4rMnCxzrUig6SecZiax Yund0VUXfNthWJ/kQDxhcATVOkQo8w3zI/UMmU2FOrTcUWwjRS4tyLG68X8BiMUu 7Z0t7kHyLJLZdHvgABrsYjG6HjBY/h9lyg0JVAlf7GJBLx92A4oOyyRRxTe3TkmQ MyIj4HGxN/8IUbpS6cQt8kxLES7LkjPFedF2Gk+B4WcZLoHoPANrgMCpKxUYdwiM p/7zSBDd9MjP9vbrMW+N0d1hxjrqfP3GCWL2yTdV4zmrA6rDlQfu6PlBJEJGzFnG SqLWkA2qVqZagGd+oTL+eIcmRiiv9ah+WAWGfck7bG2/4Xu3nOPGTraQO8FyGDNh XKqJ5tcdIVY= =2Gnx -----END PGP SIGNATURE-----