Hello, thanks a lot for the patch. So, two things here:
1. the move away from minidom, which is undoubtedly a good thing.
2. switching to per-release instead of per-year, which is not as
clear-cut IMO.
We can do #1 right away, if you split the patch, but for #2 I'd like to
hear more opinions. I'll start by asking in #debian-security on oftc,
but comments here are more than welcome.
Cheers,
--Seb

