DFSG NEW Queue

DFSG, Licensing & New Packages Team

Review: xmlsec1 1.3.10-1

New Package Report

.changes
Distributionexperimental
DateTue, 07 Apr 2026 21:37:10 +0200
Sourcexmlsec1
Version1.3.10-1
Changed-ByRene Engelhard
Architecturesource amd64 all
Changelog
xmlsec1 (1.3.10-1) experimental; urgency=medium
 .
   * New upstream version 1.3.10
 .
   * debian/*: upstream changed SONAME to reflect the package version. not
     ideal, but better than ABI breakages (which happens in 1.3.10, too).
     Adapt.
   * debian/*.symbols: update
   * debian/control: update B-D versions according to upstream release notes
   * debian/rules: stop rm -f'ing docs/api/*.png
.dsc
Priorityoptional
Componentmain
Package-Listlibxmlsec1-10310 deb libs optional arch=any
libxmlsec1-dev deb libdevel optional arch=any
libxmlsec1-doc deb text optional arch=all
libxmlsec1-gnutls10310 deb libs optional arch=any
libxmlsec1-nss10310 deb libs optional arch=any
libxmlsec1-openssl10310 deb libs optional arch=any
xmlsec1 deb text optional arch=any
Sectionlibs
debian/copyright
This package was debianized by John V. Belmonte <jbelmonte@debian.org> on
Tue, 11 Feb 2003 14:58:00 -0500.

It was downloaded from ftp://ftp.aleksey.com/pub/xmlsec/releases/

Upstream Author: Aleksey Sanin <aleksey@aleksey.com>

xmlsec, xmlsec-openssl, xmlsec-gnutls, xmlsec-gcrypt libraries
------------------------------------------------------------------------------
Copyright (C) 2002-2016 Aleksey Sanin.  All Rights Reserved.

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is fur-
nished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in
all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FIT-
NESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
DANIEL VEILLARD BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CON-
NECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Except as contained in this notice, the name of Aleksey Sanin shall not
be used in advertising or otherwise to promote the sale, use or other deal-
ings in this Software without prior written authorization from him.

xmlsec-nss library
------------------------------------------------------------------------------
Copyright (C) 2002-2016 Aleksey Sanin <aleksey@aleksey.com>. All Rights Reserved.
Copyright (c) 2003 America Online, Inc.  All rights reserved.

ermission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is fur-
nished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in
all copies or substantial portions of the Software.

Portions of the Software were created using source code and/or APIs
governed by the Mozilla Public License (MPL). The MPL is available
at http://www.mozilla.org/MPL/MPL-1.1.html. The MPL permits such
portions to be distributed with code not governed by MPL, as long
as the requirements of MPL are fulfilled for such portions.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FIT-
NESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
ALEKSEY SANIN BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CON-
NECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Except as contained in this notice, the name of Aleksey Sanin shall not
be used in advertising or otherwise to promote the sale, use or other deal-
ings in this Software without prior written authorization from him.

xmlsec-mscrypto library
------------------------------------------------------------------------------
Copyright (C) 2002-2016 Aleksey Sanin <aleksey@aleksey.com>. All Rights Reserved.
Copyright (C) 2003 Cordys R&D BV, All rights reserved.
Copyright (C) 2007 Roumen Petrov.
Copyright (c) 2005-2006 Cryptocom LTD (http://www.cryptocom.ru).

License same as xmlsec, xmlsec-openssl, xmlsec-gnutls, xmlsec-gcrypt

xmlsec-mscng library
------------------------------------------------------------------------------
Copyright (C) 2018 Aleksey Sanin. All Rights Reserved.
Copyright (C) 2018 Miklos Vajna. All Rights Reserved.

License same as xmlsec, xmlsec-openssl, xmlsec-gnutls, xmlsec-gcrypt

Review Information

accepted — allocated to awm 6 days ago, started 6 days ago, completed 6 days ago.

Final Comment

Hi,

Please consider switching the debian/copyright to DEP-5 format for
easier processing by automated systems.

Also some lintian warnings suggest the packaging in general has not
really been reviewed here for a good while, and would be worth a
general cleanup.

Thanks!

Public Notes

6 days ago ● public

Lintian

Command: lintian -Iiv -L '>=warning' --show-overrides --color=never ../$(basename $PWD)_*.changes
Exit code: 2

N:
E: libxmlsec1-10310: symbols-file-contains-current-version-with-debian-revision on symbol xmlSecHrefKWCamellia128@Base and 2 others (libxmlsec1.so.10310) [symbols]
N: 
N:   Debian revisions should be stripped from versions in symbols files. Not
N:   doing so leads to dependencies unsatisfiable by backports (1.0-1~bpo <<
N:   1.0-1 while 1.0-1~bpo >= 1.0). If the Debian revision can't be stripped
N:   because the symbol really appeared between two specific Debian revisions,
N:   you should postfix the version with a single "~" (example: 1.0-3~ if the
N:   symbol appeared in 1.0-3).
N:   
N:   This problem normally means that the symbols were added automatically by
N:   dpkg-gensymbols. dpkg-gensymbols uses the full version number for the
N:   dependency associated to any new symbol that it detects. The maintainer
N:   must update the debian/<package>.symbols file by adding the new symbols
N:   with the corresponding upstream version.
N: 
N:   Visibility: error
N:   Show-Always: no
N:   Check: debian/shlibs
N: 
N:
E: libxmlsec1-nss10310: symbols-file-contains-current-version-with-debian-revision on symbol xmlSecNssTransformConcatKdfGetKlass@Base (libxmlsec1-nss.so.10310) [symbols]
N:
W: xmlsec1 source: build-depends-on-obsolete-package Build-Depends: pkg-config => pkgconf
N: 
N:   The package build-depends on a package that has been superseded. If the
N:   superseded package is part of an ORed group, it should not be the first
N:   package in the group.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: fields/package-relations
N: 
N:
W: libxmlsec1-dev: executable-not-elf-or-script [usr/share/doc/libxmlsec1-dev/examples/mywin32make.bat]
N: 
N:   This executable file is not an ELF format binary, and does not start with
N:   the #! sequence that marks interpreted scripts. It might be a sh script
N:   that fails to name /bin/sh as its shell, or it may be incorrectly marked
N:   as executable. Sometimes upstream files developed on Windows are marked
N:   unnecessarily as executable on other systems.
N:   
N:   If you are using debhelper to build your package, running dh_fixperms will
N:   often correct this problem for you.
N: 
N:   Please refer to Scripts (Section 10.4) in the Debian Policy Manual for
N:   details.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: executable
N: 
N:
W: xmlsec1 source: obsolete-debian-watch-file-standard 2 [debian/watch]
N: 
N:   The version= line in the debian/watch file in this package declares an
N:   obsolete version. Please upgrade to more current version.
N: 
N:   Please refer to the uscan(1) manual page for details.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: debian/watch/standard
N: 
N:
W: libxmlsec1-openssl10310: symbols-file-contains-debian-revision on symbol xmlSecOpenSSLCreateMemBio@Base and 5 others (libxmlsec1-openssl.so.10310) [symbols]
N: 
N:   Debian revisions should be stripped from versions in symbols files. Not
N:   doing so leads to dependencies unsatisfiable by backports (1.0-1~bpo <<
N:   1.0-1 while 1.0-1~bpo >= 1.0). If the Debian revision can't be stripped
N:   because the symbol really appeared between two specific Debian revisions,
N:   you should postfix the version with a single "~" (example: 1.0-3~ if the
N:   symbol appeared in 1.0-3).
N: 
N:   Please refer to the dpkg-gensymbols(1) manual page and
N:   https://wiki.debian.org/UsingSymbolsFiles for details.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: debian/shlibs
N: 
N:
W: xmlsec1 source: uses-debhelper-compat-file [debian/compat]
N: 
N:   This package declares its debhelper compatibility level with the
N:   debian/compat file.
N:   
N:   The recommended way to do so is to use the virtual package
N:   debhelper-compat instead.
N:   
N:   From debhelper 14 onward, using debian/compat will not work anymore.
N:   
N:   As such, unless you need an experimental or beta compatibility level,
N:   please remove the debian/compat file and add the debhelper-compat virtual
N:   package to your Build-Depends, for example:
N:   
N:    Build-Depends: debhelper-compat (= 13)
N: 
N:   Please refer to the debhelper(7) manual page for details.
N: 
N:   Visibility: warning
N:   Show-Always: no
N:   Check: debhelper
N: 

Back to Dashboard | View all reviews for this package