Update to 2.5.0
Needs to be tested, you need to build it, not sure why your packager info isn't in the pspec.
Also you haven't provided defusedxml, or at the very least clicked on Edit Related Revisions and added the respective patch. So that'll need to be done before this can be accepted.
I hoped a simple patch would be OK, but it requires more work. I will find some time to setup a complete VM to test everything, thank you for the review.