-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 19 Jun 2026 14:17:53 +0300
Source: mxml
Binary: libmxml-dev libmxml1 libmxml1-dbgsym
Architecture: riscv64
Version: 3.3.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-osuosl-05) <buildd_riscv64-rv-osuosl-05@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libmxml-dev - small XML parsing library (development)
 libmxml1   - small XML parsing library (runtime)
Closes: 1132328
Changes:
 mxml (3.3.1-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-5037: Out-of-bounds read in index_sort() (Closes: #1132328)
Checksums-Sha1:
 d204d2d24d7f83bca9c3137a491f1efabc593377 750056 libmxml-dev_3.3.1-1+deb13u1_riscv64.deb
 615495d57606094214ce5cb7255f607a458fc13b 43024 libmxml1-dbgsym_3.3.1-1+deb13u1_riscv64.deb
 c7ca4b3c8d81866797b1272fe96e053ccbbb485e 28496 libmxml1_3.3.1-1+deb13u1_riscv64.deb
 ed9575c2a14a0d09610cb17059952b38ccb12245 6076 mxml_3.3.1-1+deb13u1_riscv64-buildd.buildinfo
Checksums-Sha256:
 d1df21a09dffae972cc7ff702e400925f7acde5a4d271d0f080b499ee8ca3350 750056 libmxml-dev_3.3.1-1+deb13u1_riscv64.deb
 017321950f8eb1d353d6e63b977f6591c9ed3597f2747d2a8b906d6807d6c200 43024 libmxml1-dbgsym_3.3.1-1+deb13u1_riscv64.deb
 d351e13b3a21a784e07781071d5bbefb2d35374ade6d92029ee36b606408a3f2 28496 libmxml1_3.3.1-1+deb13u1_riscv64.deb
 dfc01f217133fe6f74fb979b901830623e892147465cde5be29e5fa00ed66f93 6076 mxml_3.3.1-1+deb13u1_riscv64-buildd.buildinfo
Files:
 0ef69cf98aa0f2b15a8902f849100d92 750056 libdevel optional libmxml-dev_3.3.1-1+deb13u1_riscv64.deb
 72af4922ca0ebd9395f0c694ab4d240a 43024 debug optional libmxml1-dbgsym_3.3.1-1+deb13u1_riscv64.deb
 8f2e764d578e19223a5c9df000e4c7e3 28496 libs optional libmxml1_3.3.1-1+deb13u1_riscv64.deb
 a92fe7d5d19b62d2b26576043bf7ce45 6076 libs optional mxml_3.3.1-1+deb13u1_riscv64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEBzL0NgzYDvoyHaFq4N3weDMPIr4FAmo9noMACgkQ4N3weDMP
Ir77BA//eVUQ+vmMMWkAVN+GlDnR3ikX74Ncr99IjPg290jAuo3ZF4BxZlDCOWCB
wgQAHDCX57fWQSuFpOE61fc0mg1mzBjp/OF8Z1KHoE+5ElIK019B9vx5wXi83iHH
BBuDcXf+Vgy/s+Q5zgFaojMdHu55AD0gb/GZh09aK9Ql7UtnbXB4m7GUKrw2oT5C
/uwaeebXlHD3SOVz8ZApiwGuAyLUW8Uzacmz48io0yC11KFKjIToC50rsOJZ3QP0
BEI8pkKvUOV3a3Mr8zh4uctSmfB3seNaaCCpuXCVms9rU7qB+oEf76ZmyD7wTC8k
3sAniZpEAzJ4cpTvE6XGJU/8l2+58oDrU2rOaDoCtI2Wh7p55IfPjGxpq9d9PsxN
WNHDEcAZSR+D4HBwRvVjsRPY+zLaxkw0Kt771aNvLro8F7dD+q9o4dViZl4+cyKG
69N2JbSXEeejW8yOUovrpk+nHCMattQBCR3zrYpRK2Ydv6QRRvgbF46+Z7bmEVKC
+z+BFQpqHtQ54cj6T3UFJVuZymxSzTn0x0YvoBgnvzvLEPLvHGU/5bWbk6mk7+Ox
25YcN77IbYzIK/LSjU+LdNIhb2vZpT4OS20c1WARG7azCqJZlihrhdKEMdLKouSK
864BBapiPnTTN80IjebzvRfA2lWEtEyD63MSTAf6EBFSEHkGnvY=
=oTSW
-----END PGP SIGNATURE-----