-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 19 Jun 2026 14:17:53 +0300
Source: mxml
Binary: libmxml-dev libmxml1 libmxml1-dbgsym
Architecture: i386
Version: 3.3.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libmxml-dev - small XML parsing library (development)
 libmxml1   - small XML parsing library (runtime)
Closes: 1132328
Changes:
 mxml (3.3.1-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-5037: Out-of-bounds read in index_sort() (Closes: #1132328)
Checksums-Sha1:
 aa8c69836827a35ff6f586856fd4367f3931196b 726084 libmxml-dev_3.3.1-1+deb13u1_i386.deb
 c99e421d1bcc9f3377f573e6dfaeed27f602a3aa 36904 libmxml1-dbgsym_3.3.1-1+deb13u1_i386.deb
 b00e9c0b873de58faf0379f0292af99404345dee 29088 libmxml1_3.3.1-1+deb13u1_i386.deb
 8693cff2a3577c6e3898f63b5ed9c3f4dfae84ff 6024 mxml_3.3.1-1+deb13u1_i386-buildd.buildinfo
Checksums-Sha256:
 1ffc5dee4cc55249a23627475198f2820994c7b12a3a50d79d52fd3c6fc4c8a4 726084 libmxml-dev_3.3.1-1+deb13u1_i386.deb
 d0d3c6be7daafbb219357f3d3fed7f2abdc72b515a241fd9af8b64da40f825eb 36904 libmxml1-dbgsym_3.3.1-1+deb13u1_i386.deb
 b883af1ed435c76b783689399ab1c1c555030622a24e01b00eac9d656511e821 29088 libmxml1_3.3.1-1+deb13u1_i386.deb
 e063f5851f82649cfae33f5093a054001798597e0e0d4bd5d2311e73298a57ca 6024 mxml_3.3.1-1+deb13u1_i386-buildd.buildinfo
Files:
 b9ed809d3643dbb8c0852130f754288e 726084 libdevel optional libmxml-dev_3.3.1-1+deb13u1_i386.deb
 a4b1d1204809b396737dd08c2df42040 36904 debug optional libmxml1-dbgsym_3.3.1-1+deb13u1_i386.deb
 9b48d9d76eb4d1e76e89f00e86dba1b6 29088 libs optional libmxml1_3.3.1-1+deb13u1_i386.deb
 4450ea53113026dd2e8d615f459d912b 6024 libs optional mxml_3.3.1-1+deb13u1_i386-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=QfJP
-----END PGP SIGNATURE-----