Dependency bumps

[Cantor, Scott]

I just finalized the xml-security-c-1.7.0 release at Apache in preparation
for the SP 2.5 release later this week or next. I released a small update
to log4shib (1.0.5) last week that fixes some build issues on Solaris.

The macport for xml-security will be bumped very shortly. I won't be doing
RPMs of either of those updates until I do the 2.5 release as a whole.
This is just an FYI.

Using the newer libraries of course should work fine with the 2.4.3 SP in
a source build or whatever.

-- Scott