-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 19 Jun 2026 14:17:53 +0300
Source: mxml
Binary: libmxml-dev libmxml1 libmxml1-dbgsym
Architecture: armhf
Version: 3.3.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: armhf Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libmxml-dev - small XML parsing library (development)
 libmxml1   - small XML parsing library (runtime)
Closes: 1132328
Changes:
 mxml (3.3.1-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-5037: Out-of-bounds read in index_sort() (Closes: #1132328)
Checksums-Sha1:
 ef2723404fc072a00610c7fdc0749a2f451454a4 721104 libmxml-dev_3.3.1-1+deb13u1_armhf.deb
 1e861dc37610dbaf86c32bfeb2984db28521df30 42564 libmxml1-dbgsym_3.3.1-1+deb13u1_armhf.deb
 517956c743007ca17c351abbb49f26fdd51f643d 24096 libmxml1_3.3.1-1+deb13u1_armhf.deb
 50ef55063d56c5ac228989d2d8dd5cd89b86bd11 5992 mxml_3.3.1-1+deb13u1_armhf-buildd.buildinfo
Checksums-Sha256:
 a6cf814b452d9de37c34649de55077428d8bc8bffda88d9a2ee14c94da1f4390 721104 libmxml-dev_3.3.1-1+deb13u1_armhf.deb
 5e0ac1901118de984022ede1251bb57147876a4ef273b7884d05d42ffa7634c8 42564 libmxml1-dbgsym_3.3.1-1+deb13u1_armhf.deb
 9a85de7c07a55010ad7f9a86911a2b35d9143e390fd4998d1985dc430856c6fb 24096 libmxml1_3.3.1-1+deb13u1_armhf.deb
 04054e05efb76fdc82b9bf777872cf235ff759941c0cb7877ba8b7b1f7de1b4c 5992 mxml_3.3.1-1+deb13u1_armhf-buildd.buildinfo
Files:
 18764214fa39fe2387b7c57526d6049b 721104 libdevel optional libmxml-dev_3.3.1-1+deb13u1_armhf.deb
 694ec425c3226897911064cb73a73bea 42564 debug optional libmxml1-dbgsym_3.3.1-1+deb13u1_armhf.deb
 f46a322209ff8be1f6aa0949310fc614 24096 libs optional libmxml1_3.3.1-1+deb13u1_armhf.deb
 31c20c6799252b3f82d9945af28aa74d 5992 libs optional mxml_3.3.1-1+deb13u1_armhf-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=cJZ9
-----END PGP SIGNATURE-----