-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 19 Jun 2026 14:17:53 +0300
Source: mxml
Binary: libmxml-dev libmxml1 libmxml1-dbgsym
Architecture: s390x
Version: 3.3.1-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libmxml-dev - small XML parsing library (development)
 libmxml1   - small XML parsing library (runtime)
Closes: 1132328
Changes:
 mxml (3.3.1-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-5037: Out-of-bounds read in index_sort() (Closes: #1132328)
Checksums-Sha1:
 7544697d0a558216fbf919d314000198f5166f43 723852 libmxml-dev_3.3.1-1+deb13u1_s390x.deb
 7ff6e077b6ee07076bfa816b1571a1a940fdc8cf 42920 libmxml1-dbgsym_3.3.1-1+deb13u1_s390x.deb
 41a771675c37df147cbc89bf87d3b458ec6d9f2d 27232 libmxml1_3.3.1-1+deb13u1_s390x.deb
 a3f482226f81d88d51e78ab7e40bba730e714a94 5988 mxml_3.3.1-1+deb13u1_s390x-buildd.buildinfo
Checksums-Sha256:
 5245d30f1664c0691a4a3f442a836c133a3a940447fd81f616b8be5d5141eb20 723852 libmxml-dev_3.3.1-1+deb13u1_s390x.deb
 64e8134e89f4208554bfab66996e42e356ea26bcf1acd0e134041fde47f26fad 42920 libmxml1-dbgsym_3.3.1-1+deb13u1_s390x.deb
 bb06ed06c4c4de25e44b09e85615f10216fe97027d95620caee71eee583dfaa7 27232 libmxml1_3.3.1-1+deb13u1_s390x.deb
 ca55215fa4ac1545d36a11bc8536331806d7e96a4ef270126579ee3725103988 5988 mxml_3.3.1-1+deb13u1_s390x-buildd.buildinfo
Files:
 08b53dcf069a4a0879335eb6e78b5d72 723852 libdevel optional libmxml-dev_3.3.1-1+deb13u1_s390x.deb
 0225babf98d1d6b92aa2b003785c1c47 42920 debug optional libmxml1-dbgsym_3.3.1-1+deb13u1_s390x.deb
 07185944e965b57556c9cfc019b428fd 27232 libs optional libmxml1_3.3.1-1+deb13u1_s390x.deb
 275c568c7064fd275a2ce3a41d601953 5988 libs optional mxml_3.3.1-1+deb13u1_s390x-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEENly2ANlpa4eeqnluvVOPI7pYNpgFAmo9l1kACgkQvVOPI7pY
Npgmqw/+JQlDiwot4pTSUctIKwhgHLlM5bNZiMoHLXTSURxLydE1SQTZEhZst+Ye
43jTAhY1NdYSwI+gyR7tZuyMLvOToPVidpePhgUzzv+eeP6vaUeOJF8xCUIbSQdo
85agpQJkJFBYO44dTIzTpc8CmhPpVo9QgyVfi9vDDNLFxElHn/vfzn4t3L/g4ksd
dVHTFuAtjlEZKX4kMiz+cmoP0XoTvril0WWkj78p2//2TjvyKg/lJaqCDM9B/r5/
testdX8q9+vfgcVbrMJa48U66yto5RrW/mOjBenWhZ3CkllrASQs/8/Xc/mRHvig
eGzOnGDb6psUL15ouuPf55IceeHxZk+fHNkjBz7Crq1YvGYozgNUsaFQSg80NuQy
WLr00iYs1v9U1k28GKkw1dUXviRcKf8WzLUk5oVCRyyVSxWwcSxB0X2jrHjgV5pG
RV3noSBFe9/6YIaGYxhXj8MbYF6EcqBZF3iqCgOGfaoE56Rba2g9vtTZmqWHiPui
Sgl6Aj5AM7IOTMQ1jAIX2dwnQ6FInPV1OsmuaWjioFSbx3+Mprglj1yIa4aCqcCP
SD7UVk6yUWxdGin1pv/U+9QLcmfJiB0l6+a1z/d3znaX7GZAX4Yfk7KG9BR8vOJe
JXfXmKL48Sj1Xb97OsJpjQbL6XXyD3qTmUY2v6BAC3WrhO30vu8=
=K/Ng
-----END PGP SIGNATURE-----