-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 09 May 2026 17:56:07 +0300
Source: musl
Architecture: source
Version: 1.2.5-3.1~deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Reiner Herrmann <reiner@reiner-h.de>
Changed-By: Adrian Bunk <bunk@debian.org>
Closes: 1133372
Changes:
 musl (1.2.5-3.1~deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * Rebuild for trixie.
 .
 musl (1.2.5-3.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-6042: Algorithmic complexity DoS in iconv GB18030 decoder
   * CVE-2026-40200: Stack corruption in qsort
   * (Closes: #1133372)
Checksums-Sha1:
 bb2dc69e520d5a06b67969cbcf2b434ed576bb92 3683 musl_1.2.5-3.1~deb13u1.dsc
 36210d3423172a40ddcf83c762207c5f760b60a6 1080786 musl_1.2.5.orig.tar.gz
 fec06dab23edbbc33612205bc80e537f8e937b49 490 musl_1.2.5.orig.tar.gz.asc
 bbd444e005188fe6c44e5a72f7ad26afe1ba36de 29056 musl_1.2.5-3.1~deb13u1.debian.tar.xz
Checksums-Sha256:
 972970614ed9159b04343b7f85bdf16f565b4a903f05d97e57dc730c7b0b8066 3683 musl_1.2.5-3.1~deb13u1.dsc
 a9a118bbe84d8764da0ea0d28b3ab3fae8477fc7e4085d90102b8596fc7c75e4 1080786 musl_1.2.5.orig.tar.gz
 d9030116fd03e4acfa0b665a13a5de46110296b4e30bb8e67be1f08af29f6306 490 musl_1.2.5.orig.tar.gz.asc
 46fdfb271edc2f035d8d4063ff2e299734409693e781e69e4b77e0a9a495072e 29056 musl_1.2.5-3.1~deb13u1.debian.tar.xz
Files:
 2ab8354e8d9ee4c08c56013aadffed14 3683 libs optional musl_1.2.5-3.1~deb13u1.dsc
 ac5cfde7718d0547e224247ccfe59f18 1080786 libs optional musl_1.2.5.orig.tar.gz
 52945accececaefa1fb269f95eb152b2 490 libs optional musl_1.2.5.orig.tar.gz.asc
 778daa9b6ea8b1beb482e79477729e45 29056 libs optional musl_1.2.5-3.1~deb13u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=0HMH
-----END PGP SIGNATURE-----