Yes this is an xmlsec bug. I've let the library author know about it and he's already submitted a fix, so this would appear in the next xmlsec release.
http://git.gnome.org/browse/xmlsec/commit/?id=0c1e4203812ceb36beb730e86860946d9c6afa03 >From a few searches it seems like libgeier is the only library that uses this function, and the problem has been reported by various people for over a year. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org