xmltooling (3.3.0-2build1) plucky; urgency=medium

  * No-change rebuild for xml-security-c.

 -- Sudip Mukherjee <sudipm.mukherjee@gmail.com>  Fri, 17 Jan 2025 17:48:48 +0000

xmltooling (3.3.0-2) unstable; urgency=medium

  * [7a62002] This library is supported only as a part of the Shibboleth Project
  * Upload to unstable

 -- Ferenc Wágner <wferi@debian.org>  Sat, 11 Jan 2025 19:38:31 +0100

xmltooling (3.3.0-1) experimental; urgency=medium

  * [34bc7f9] New upstream release: 3.3.0
  * [9217c53] Adjust library package name to the new SO version
  * [ac43dcd] pkgconf superseded pkg-config
  * [b8d0cd7] Update Standards-Version to 4.7.0 (no changes required)
  * [79ae81d] Update copyright years

 -- Ferenc Wágner <wferi@debian.org>  Sun, 15 Dec 2024 11:31:16 +0100

xmltooling (3.2.4-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1063282

 -- Steve Langasek <vorlon@debian.org>  Thu, 29 Feb 2024 07:42:33 +0000

xmltooling (3.2.4-2) unstable; urgency=medium

  * [45abfb7] Doxygen replaced some PNG graphics with SVG (Closes: #1052944)

 -- Ferenc Wágner <wferi@debian.org>  Sat, 30 Sep 2023 10:08:56 +0200

xmltooling (3.2.4-1) unstable; urgency=medium

  * [f89bdd8] New upstream release: 3.2.4
    SECURITY: corrects a server-side request forgery (SSRF) vulnerability.
    From https://shibboleth.net/community/advisories/secadv_20230612.txt:
    # Parsing of KeyInfo elements can cause remote resource access
    Including certain legal but "malicious in intent" content in the
    KeyInfo element defined by the XML Signature standard will result
    in attempts by the SP's shibd process to dereference untrusted URLs.
    While the content of the URL must be supplied within the message
    and does not include any SP internal state or dynamic content,
    there is at minimum a risk of denial of service, and the attack
    could be combined with others to create more serious vulnerabilities
    in the future. (Closes: #1037948)
  * [79533dd] Delete upstreamed patch
  * [6ae406d] Remove Etienne Dysli Metref from Uploaders.
    Thanks for your work, Etienne, and best wishes for your future
    endeavors!

 -- Ferenc Wágner <wferi@debian.org>  Wed, 14 Jun 2023 22:04:20 +0200

xmltooling (3.2.3-1) unstable; urgency=medium

  [ Ferenc Wágner ]
  * [f776702] New upstream release: 3.2.3
  * [bf7fe22] Drop upstream patch released in 3.2.2
  * [13f222e] Update Standards-Version to 4.6.2 (no changes required)
  * [952bc0e] Update debian/* copyright year
  * [4fef307] New patch: Fix capitalization of CipherReference.xml file name
  * [aa7f313] Add repository info to upstream metadata

  [ Debian Janitor ]
  * [a511f55] Set upstream metadata fields: Bug-Submit (from ./configure).
    Changes-By: lintian-brush
    Fixes: lintian: upstream-metadata-file-is-missing
  * [17d19f6] Remove constraints unnecessary since buster (oldstable)
    Changes-By: deb-scrub-obsolete

 -- Ferenc Wágner <wferi@debian.org>  Wed, 11 Jan 2023 22:42:18 +0100

xmltooling (3.2.1-4) unstable; urgency=medium

  * [b80928c] Don't require cxxtest under the nocheck build profile.
    To fix crossbuilding.

 -- Ferenc Wágner <wferi@debian.org>  Wed, 20 Jul 2022 23:33:43 +0200

xmltooling (3.2.1-3) unstable; urgency=medium

  * [c4e07d0] Suppress deprecation warnings in autopkgtests, too
  * [e25b35e] New patch: CPPXT-153 - test.pfx uses obsolete encryption
    algorithm.
    Thanks to Scott Cantor
  * [ec6dab8] Revert "xmltoolingtest: enable legacy PKCS#12 algorithms"
    This reverts commit 357c2a553815d53ad905b6ad564c9775c864bfb4.
    Not needed since we cherry-picked the upstream commit c09c9d0b1 fixing
    https://shibboleth.atlassian.net/browse/CPPXT-153 as a Debian patch.

 -- Ferenc Wágner <wferi@debian.org>  Fri, 10 Jun 2022 13:05:27 +0200

xmltooling (3.2.1-2) unstable; urgency=medium

  * [357c2a5] xmltoolingtest: enable legacy PKCS#12 algorithms.
    OpenSSL 3 requires this for decoding data.pfx. (Closes: #1006581)
  * [a6c620f] Update Standards-Version to 4.6.1 (no changes required)
  * [8831817] Switch to Debhelper compatibility level 13
  * [bb23e99] Replace override_dh_{install,missing} with debian/not-installed
  * [77dfd2c] Suppress GCC deprecation warnings, they probably won't be heeded

 -- Ferenc Wágner <wferi@debian.org>  Sun, 05 Jun 2022 20:43:32 +0200

xmltooling (3.2.1-1) unstable; urgency=medium

  * [63f64c9] New upstream release: 3.2.1
  * [e61cb6e] Drop released patch
  * [91d8dc7] Update Standards-Version to 4.6.0 (no changes required)
  * [f36f64f] Work around test files left in the distribution tarball

 -- Ferenc Wágner <wferi@debian.org>  Tue, 23 Nov 2021 08:57:01 +0100

xmltooling (3.2.0-3) unstable; urgency=medium

  * [e9c5d46] New patch: CPPXT-151 Wiki migration broke some SecurityHelperTest
    tests.
    Thanks to Rod Widdowson (Closes: #991423)
  * [fe231e2] Declare that our autopkgtest needs internet access

 -- Ferenc Wágner <wferi@debian.org>  Mon, 26 Jul 2021 16:39:29 +0200

xmltooling (3.2.0-2) unstable; urgency=medium

  * Upload to unstable

 -- Ferenc Wágner <wferi@debian.org>  Wed, 06 Jan 2021 09:47:28 +0100

xmltooling (3.2.0-1) experimental; urgency=medium

  * [64912ff] New upstream release: 3.2.0
  * [5c43277] Update Standards-Version to 4.5.1 (no changes needed)
  * [977cead] Rename library package for upstream SONAME bump
  * [3eecc61] Bump watch file format version to 4

 -- Ferenc Wágner <wferi@debian.org>  Sun, 27 Dec 2020 14:36:24 +0100

xmltooling (3.1.0-2) unstable; urgency=medium

  * [4435dfb] Update packaging list email address
  * Upload to unstable

 -- Ferenc Wágner <wferi@debian.org>  Mon, 22 Jun 2020 18:00:09 +0200

xmltooling (3.1.0-1) experimental; urgency=medium

  * [e0f263d] New upstream release: 3.1.0
  * [019b1c4] Rename library package for upstream SONAME bump

 -- Ferenc Wágner <wferi@debian.org>  Mon, 20 Apr 2020 10:46:13 +0200

xmltooling (3.0.5-1) unstable; urgency=medium

  * [49cc60b] New upstream release: 3.0.5
  * [f713597] As an autopkgtest, build the unit tests against the installed
    package
  * [023be7c] Enroll to basic Salsa CI
  * [8a805da] Upgrade Standards-Version to 4.5.0 (no changes required)
  * [ea16c9d] Switch to Debhelper compat level 12
  * [373af1f] Enable rootless build
  * [b8ce25d] Turn the test logs and result files into autopkgtest artifacts
  * [cb949d7] Strip extra signatures from the upstream tarball signing key
  * [84b70cd] I don't plan to provide symbols files

 -- Ferenc Wágner <wferi@debian.org>  Tue, 28 Jan 2020 10:58:01 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libxmltooling11`.
