Sync xml-security-c 1.4.0-4 (universe) from Debian testing (main).

[Michael Bienia]

Please sync xml-security-c 1.4.0-4 (universe) from Debian testing (main).

Changelog since current karmic version 1.4.0-3:

xml-security-c (1.4.0-4) unstable; urgency=high

  * CVE-2009-0217: Apply upstream patch to sanity-check the HMAC
    truncation length. Closes a vulnerability that could allow an
    attacker to spoof HMAC-based signatures and bypass authentication.
  * Remove duplicate section for libxml-security-c14.
  * Update standards version to 3.8.2 (no changes required).

 -- Russ Allbery <email address hidden> Fri, 24 Jul 2009 15:02:55 -0700

[Jamie Strandboge (jdstrand)]

[Updating] xml-security-c (1.4.0-3 [Ubuntu] < 1.4.0-4 [Debian])
 * Trying to add xml-security-c...
  - <xml-security-c_1.4.0.orig.tar.gz: already in distro - downloading from librarian>
  - <xml-security-c_1.4.0-4.dsc: downloading from http://ftp.debian.org/debian/>
  - <xml-security-c_1.4.0-4.diff.gz: downloading from http://ftp.debian.org/debian/>
I: xml-security-c [universe] -> libxml-security-c14_1.4.0-3 [universe].
I: xml-security-c [universe] -> libxml-security-c-dev_1.4.0-3 [universe].