diff --git a/xmlsec1.spec b/xmlsec1.spec
index 62a1ce2..4edf6ce 100644
--- a/xmlsec1.spec
+++ b/xmlsec1.spec
@@ -1,7 +1,7 @@
 Summary: Library providing support for "XML Signature" and "XML Encryption" standards
 Name: xmlsec1
 Version: 1.2.29
-Release: 6%{?dist}%{?extra_release}
+Release: 7%{?dist}%{?extra_release}
 License: MIT
 Source0: https://www.aleksey.com/xmlsec/download/xmlsec1-%{version}.tar.gz
 URL: http://www.aleksey.com/xmlsec/
@@ -105,7 +105,7 @@ Libraries, includes, etc. for developing XML Security applications with NSS.
 
 %build
 autoreconf -vfi
-%configure --disable-static
+%configure --disable-static --disable-md5 --disable-sha1
 sed -i 's|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g' libtool
 sed -i 's|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g' libtool
 %make_build V=1
@@ -176,11 +176,16 @@ mv %{buildroot}%{_docdir}/xmlsec1/* __tmp_doc
 %{_libdir}/pkgconfig/xmlsec1-nss.pc
 
 %changelog
+* Thu Jun 17 2021 Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
+- compile without sha1 and md5
+- Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
+                           SHA-1 algorithm by default
+
 * Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 1.2.29-6
 - Rebuilt for RHEL 9 BETA for openssl 3.0
   Related: rhbz#1971065
 
-* Thu Jun  3 2021 Jakub Hrozek <jhrozek@redhat.com - 1.2.29-5
+* Thu Jun  3 2021 Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-5
 - Rebuilt for OpenSSL3
 - Related: rhbz#1962052 - lasso: Port to OpenSSL 3.0