xmltooling (3.3.0-3ubuntu1) stonking; urgency=medium

  * Fix OpenSSL 4.0 compatibility (LP: #2155038)
    - d/p/fix-for-openssl4-compat.patch: use const for X509 accessor return
      values, replace ASN1_STRING_data with ASN1_STRING_get0_data

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Wed, 01 Jul 2026 10:27:27 +0200

xmltooling (3.3.0-3) unstable; urgency=medium

  * [c33f0d9] New patch: Disable SHORT_NAMES in Doxygen to gain reproducibility
  * [17c1903] Run "wrap-and-sort -ast" and manually wrap Restrictions
  * [7c9b3f2] New patch: Make test data URL prefix overridable by environment
    variable
  * [2bf10b7] Use local HTTP server for networked autopkgtests.
    The public archive requires authentication now. (Closes: #1111740)
  * [6103987] Use local HTTP server for build-time networked tests

 -- Ferenc Wágner <wferi@debian.org>  Sun, 24 Aug 2025 12:45:09 +0200

xmltooling (3.3.0-2) unstable; urgency=medium

  * [7a62002] This library is supported only as a part of the Shibboleth Project
  * Upload to unstable

 -- Ferenc Wágner <wferi@debian.org>  Sat, 11 Jan 2025 19:38:31 +0100

xmltooling (3.3.0-1) experimental; urgency=medium

  * [34bc7f9] New upstream release: 3.3.0
  * [9217c53] Adjust library package name to the new SO version
  * [ac43dcd] pkgconf superseded pkg-config
  * [b8d0cd7] Update Standards-Version to 4.7.0 (no changes required)
  * [79ae81d] Update copyright years

 -- Ferenc Wágner <wferi@debian.org>  Sun, 15 Dec 2024 11:31:16 +0100

xmltooling (3.2.4-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1063282

 -- Steve Langasek <vorlon@debian.org>  Thu, 29 Feb 2024 07:42:33 +0000

xmltooling (3.2.4-2) unstable; urgency=medium

  * [45abfb7] Doxygen replaced some PNG graphics with SVG (Closes: #1052944)

 -- Ferenc Wágner <wferi@debian.org>  Sat, 30 Sep 2023 10:08:56 +0200

xmltooling (3.2.4-1) unstable; urgency=medium

  * [f89bdd8] New upstream release: 3.2.4
    SECURITY: corrects a server-side request forgery (SSRF) vulnerability.
    From https://shibboleth.net/community/advisories/secadv_20230612.txt:
    # Parsing of KeyInfo elements can cause remote resource access
    Including certain legal but "malicious in intent" content in the
    KeyInfo element defined by the XML Signature standard will result
    in attempts by the SP's shibd process to dereference untrusted URLs.
    While the content of the URL must be supplied within the message
    and does not include any SP internal state or dynamic content,
    there is at minimum a risk of denial of service, and the attack
    could be combined with others to create more serious vulnerabilities
    in the future. (Closes: #1037948)
  * [79533dd] Delete upstreamed patch
  * [6ae406d] Remove Etienne Dysli Metref from Uploaders.
    Thanks for your work, Etienne, and best wishes for your future
    endeavors!

 -- Ferenc Wágner <wferi@debian.org>  Wed, 14 Jun 2023 22:04:20 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libxmltooling-doc`.
