-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 19 Jun 2026 14:17:53 +0300
Source: mxml
Binary: libmxml-dev libmxml1 libmxml1-dbgsym
Architecture: ppc64el
Version: 3.3.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-conova-01) <buildd_ppc64el-ppc64el-conova-01@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libmxml-dev - small XML parsing library (development)
 libmxml1   - small XML parsing library (runtime)
Closes: 1132328
Changes:
 mxml (3.3.1-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-5037: Out-of-bounds read in index_sort() (Closes: #1132328)
Checksums-Sha1:
 26ed26745a9f061a01eabeb4275718250893e12f 728552 libmxml-dev_3.3.1-1+deb13u1_ppc64el.deb
 9bd973c39d4918bb1496e72076458022da4bac73 45604 libmxml1-dbgsym_3.3.1-1+deb13u1_ppc64el.deb
 ef32e611cd4e8074adfd5bd6545e05cb811c51de 31596 libmxml1_3.3.1-1+deb13u1_ppc64el.deb
 09fef43cd85ae0fde71ec788f731e2156eeb16d6 6131 mxml_3.3.1-1+deb13u1_ppc64el-buildd.buildinfo
Checksums-Sha256:
 923e9a7f141cc075967dc58d8e26aa872a7623e45cd333f9771e37dd22ed27ce 728552 libmxml-dev_3.3.1-1+deb13u1_ppc64el.deb
 37a6d190997a5a0ef5ee493cecdd7d5ae247eb2aa7e609125ac4d11cb118eea4 45604 libmxml1-dbgsym_3.3.1-1+deb13u1_ppc64el.deb
 e780dfd06718fd53aaee0f97a590a812753a6092dd094186629406b76148db7f 31596 libmxml1_3.3.1-1+deb13u1_ppc64el.deb
 068d96fc98c20602e2630d15f67c102f6f1dfc49778a7e521a088007e04d10fa 6131 mxml_3.3.1-1+deb13u1_ppc64el-buildd.buildinfo
Files:
 11dfd9a9415500db8f1dfe6e8be605ce 728552 libdevel optional libmxml-dev_3.3.1-1+deb13u1_ppc64el.deb
 c376febb1cfa8fdb0e151aea1a28155c 45604 debug optional libmxml1-dbgsym_3.3.1-1+deb13u1_ppc64el.deb
 9a5b28eba0d90609cf033d6a9ef88cbd 31596 libs optional libmxml1_3.3.1-1+deb13u1_ppc64el.deb
 86ec88aa4fdd6c1db80fa0539ebf3224 6131 libs optional mxml_3.3.1-1+deb13u1_ppc64el-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=+k1Z
-----END PGP SIGNATURE-----