-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 19 Jun 2026 14:17:53 +0300
Source: mxml
Binary: libmxml-dev libmxml1 libmxml1-dbgsym
Architecture: armel
Version: 3.3.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: armel Build Daemon (arm-conova-02) <buildd_arm64-arm-conova-02@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libmxml-dev - small XML parsing library (development)
 libmxml1   - small XML parsing library (runtime)
Closes: 1132328
Changes:
 mxml (3.3.1-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-5037: Out-of-bounds read in index_sort() (Closes: #1132328)
Checksums-Sha1:
 8290eb4304d1de1f5030a65faddad66c63f2a39a 721152 libmxml-dev_3.3.1-1+deb13u1_armel.deb
 6f0034358d677cf4718053a10a39502c7d2145de 42380 libmxml1-dbgsym_3.3.1-1+deb13u1_armel.deb
 9a2c87e9f8988ca4632f4e3663258e8ed23b803e 23980 libmxml1_3.3.1-1+deb13u1_armel.deb
 cb8174cfd2b7f66b403752a0b88de9fe462c25f3 5978 mxml_3.3.1-1+deb13u1_armel-buildd.buildinfo
Checksums-Sha256:
 8ace39129405d0abe52b94e2672abaf006b7f609e6fb3842bac6211dd52b4a39 721152 libmxml-dev_3.3.1-1+deb13u1_armel.deb
 0f08a571b63e0307744f54ee921d140c6a5332440bb460f3079a44e9e9ed45cc 42380 libmxml1-dbgsym_3.3.1-1+deb13u1_armel.deb
 43d04a62b1cf1a20e2008ce97c118ca7c93fce63b83af7140d3e806ad0939f27 23980 libmxml1_3.3.1-1+deb13u1_armel.deb
 3a9ce45a00a120bca91e8e3bfca0a736ee1e15b793a76d59bd0980dd98971327 5978 mxml_3.3.1-1+deb13u1_armel-buildd.buildinfo
Files:
 65e44ca0f6758773197069ecbc476718 721152 libdevel optional libmxml-dev_3.3.1-1+deb13u1_armel.deb
 0c56669492295da628f17861b9416b90 42380 debug optional libmxml1-dbgsym_3.3.1-1+deb13u1_armel.deb
 19b556156b1590bbd853b67ed3641cf8 23980 libs optional libmxml1_3.3.1-1+deb13u1_armel.deb
 31dcea86baa318cb2a291563a026bffb 5978 libs optional mxml_3.3.1-1+deb13u1_armel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=pD1q
-----END PGP SIGNATURE-----