python-signxml vulnerabilities (Debian)

2 vulnerabilities.

• python-signxml Debian SignXML's signature verification with HMAC is vulnerable to a timing attack CVE-2025-48995 Fix available 6.9 MediumJune 2, 2025
• python-signxml Debian SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack CVE-2025-48994 Fix available 6.9 MediumJune 2, 2025