xmltooling (1.6.4-1) [PTS] [DDPO]

OK: VCS matches the version in the archive

Git: https://salsa.debian.org/shib-team/xmltooling.git
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian/master
Path: debian/changelog
Browser: https://salsa.debian.org/shib-team/xmltooling
Last scan: 2018-06-22 07:41:05+00
Next scan: 2018-06-23 07:56:00+00

Debian changelog in Git:

xmltooling (1.6.4-1) unstable; urgency=high

  * [6c27b19] New upstream security release 1.6.4
    DSA-4126-1, CVE-2018-0489: additional data forgery flaws
    These flaws allow for changes to an XML document that do not break a
    digital signature but alter the user data passed through to applications
    enabling impersonation attacks and exposure of protected information.
    https://shibboleth.net/community/advisories/secadv_20180227.txt
    https://issues.shibboleth.net/jira/browse/CPPXT-128
  * [621ab19] Refresh our patches

 -- Ferenc Wágner <wferi@debian.org>  Wed, 28 Feb 2018 10:39:05 +0100

This branch is even with tag debian/1.6.4-1