-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 19 Jun 2026 14:17:53 +0300
Source: mxml
Binary: libmxml-dev libmxml1 libmxml1-dbgsym
Architecture: amd64
Version: 3.3.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libmxml-dev - small XML parsing library (development)
 libmxml1   - small XML parsing library (runtime)
Closes: 1132328
Changes:
 mxml (3.3.1-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-5037: Out-of-bounds read in index_sort() (Closes: #1132328)
Checksums-Sha1:
 21d289139218caf89a5bd91bb498ef3b7fe71986 724488 libmxml-dev_3.3.1-1+deb13u1_amd64.deb
 fbea4c7b8f0bb314ad5f595158cc23b91b4012e4 42620 libmxml1-dbgsym_3.3.1-1+deb13u1_amd64.deb
 2709df8f0e250ad4005270c1bc9c78f6014f3075 28384 libmxml1_3.3.1-1+deb13u1_amd64.deb
 1c5e7e2c20c04c43d5cf4cc65ca7c1929f80abe3 6126 mxml_3.3.1-1+deb13u1_amd64-buildd.buildinfo
Checksums-Sha256:
 809bd39ab184f158c19afb8314a5946b84f30c5cf04d0aaf15c7f73cf6ad84ac 724488 libmxml-dev_3.3.1-1+deb13u1_amd64.deb
 a991999d07218c1633d6885cc9d51870266d7cb8130a7f050469253f4ec38b48 42620 libmxml1-dbgsym_3.3.1-1+deb13u1_amd64.deb
 81cfa2ba23015239ba9f8ca77a66de51e5dbb1c91473852849cc3a30a819f141 28384 libmxml1_3.3.1-1+deb13u1_amd64.deb
 8edac93f73b1e6ebae8f37b4058c477a91239bbc7c8d957b861db82856ddd8d1 6126 mxml_3.3.1-1+deb13u1_amd64-buildd.buildinfo
Files:
 f34d5165d4cb41b9751487110a30d06e 724488 libdevel optional libmxml-dev_3.3.1-1+deb13u1_amd64.deb
 34c2ea33f01dc633cf84379386602ee1 42620 debug optional libmxml1-dbgsym_3.3.1-1+deb13u1_amd64.deb
 bf909acf2840be2a0055a190461f2f64 28384 libs optional libmxml1_3.3.1-1+deb13u1_amd64.deb
 07435a15291448a9575db2083ddb88c7 6126 libs optional mxml_3.3.1-1+deb13u1_amd64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=FIG3
-----END PGP SIGNATURE-----