Accepted expat 2.7.5-1 (source) into unstable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 17 Mar 2026 22:23:17 +0100
Source: expat
Architecture: source
Version: 2.7.5-1
Distribution: unstable
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Closes: 1131117 1131118 1131119
Changes:
 expat (2.7.5-1) unstable; urgency=high
 .
   * New upstream release:
     - fixes CVE-2026-32776: NULL function pointer dereference for empty
       external parameter entities (closes: #1131117),
     - fixes CVE-2026-32777: protect from XML_TOK_INSTANCE_START infinite
       loop in entityValueProcessor() (closes: #1131118),
     - fixes CVE-2026-32778: NULL dereference in setContext() on retry after
       an earlier ouf-of-memory condition (closes: #1131119).
Checksums-Sha1:
 610954f08241b4d915ead24fda15c5a11d78fad1 1970 expat_2.7.5-1.dsc
 386b1e2bb9e61c6c3d3a1741f64e0f391eb56f42 8449555 expat_2.7.5.orig.tar.gz
 4909a566332c2b76b5dce7fd18c12c00d3cd21b1 13544 expat_2.7.5-1.debian.tar.xz
Checksums-Sha256:
 b9d12670f800b12fb41cf39d2b34d9115223b95d50e3814deb17aaf47bd5f0fb 1970 expat_2.7.5-1.dsc
 7e23daf05f0ab028570d709ce48d724802baa6e4fbfa4db9b7cee3b72ee2062b 8449555 expat_2.7.5.orig.tar.gz
 16927000bcde5e8f2ed26c7bd934cec3741d03205bbb29e1071eb884ee6bed49 13544 expat_2.7.5-1.debian.tar.xz
Files:
 3a3d7438a9c67e372ad2034c143bc8eb 1970 text optional expat_2.7.5-1.dsc
 aecc4366ab1a5189d8f027c369305c9a 8449555 text optional expat_2.7.5.orig.tar.gz
 1e0636791258a1247aad0333651f17fd 13544 text optional expat_2.7.5-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=bRG7
-----END PGP SIGNATURE-----