Debian: DSA-5432-1: xmltooling security update

Jurien de Jong discovered that the parsing of KeyInfo elements within the XMLTooling library may result in server-side request forgery. For the oldstable distribution (bullseye), this problem has been fixed