-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 19 Jun 2026 14:17:53 +0300
Source: mxml
Binary: libmxml-dev libmxml1 libmxml1-dbgsym
Architecture: arm64
Version: 3.3.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: arm64 Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libmxml-dev - small XML parsing library (development)
 libmxml1   - small XML parsing library (runtime)
Closes: 1132328
Changes:
 mxml (3.3.1-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-5037: Out-of-bounds read in index_sort() (Closes: #1132328)
Checksums-Sha1:
 b5b65c05ba8253557856ccf479617752fcc3f679 724136 libmxml-dev_3.3.1-1+deb13u1_arm64.deb
 34d9d53bbf79110542befbcac2a182ae83ea27d5 42988 libmxml1-dbgsym_3.3.1-1+deb13u1_arm64.deb
 57063e22f63eac408e66eecff9aeeb6b622bcc0f 27240 libmxml1_3.3.1-1+deb13u1_arm64.deb
 4c11d4204ab93de63891f99a800bbfc71740ca37 6110 mxml_3.3.1-1+deb13u1_arm64-buildd.buildinfo
Checksums-Sha256:
 fc65df9a8e7e70de526df2abe7a0451c2dd0f979eab62963f01ab8669f80b961 724136 libmxml-dev_3.3.1-1+deb13u1_arm64.deb
 7444e3522914021cde25979f976aca385b7d0fc693da7408aeb42e4bd2ef31e8 42988 libmxml1-dbgsym_3.3.1-1+deb13u1_arm64.deb
 27a249d34a38aabad3785f58ad0ef7fbad022e5667ee0debf843d6d660ddec26 27240 libmxml1_3.3.1-1+deb13u1_arm64.deb
 6ef4096ca2013b335e4740b68f08f7e9305c4bc5b850567a56e7ba773d8c064d 6110 mxml_3.3.1-1+deb13u1_arm64-buildd.buildinfo
Files:
 3e37f2cc19f2b38429871dd22c03d9a6 724136 libdevel optional libmxml-dev_3.3.1-1+deb13u1_arm64.deb
 2f5c0a5224844a836164c6054a3c9003 42988 debug optional libmxml1-dbgsym_3.3.1-1+deb13u1_arm64.deb
 ad6b025ef03534046e29c8e387af1b8a 27240 libs optional libmxml1_3.3.1-1+deb13u1_arm64.deb
 030391c51da76014ba227910cfc66d69 6110 libs optional mxml_3.3.1-1+deb13u1_arm64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=IdKk
-----END PGP SIGNATURE-----