-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 27 Nov 2025 21:29:04 -0300
Source: rsync
Binary: rsync rsync-dbgsym
Architecture: armel
Version: 3.4.1+ds1-5+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: arm Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Matheus Polkorny <mpolkorny@gmail.com>
Description:
 rsync      - fast, versatile, remote (and local) file-copying tool
Changes:
 rsync (3.4.1+ds1-5+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * d/p/CVE-2025-10158.patch: Import upstream patch to fix CVE-2025-10158
 .
     A malicious client acting as the receiver of an rsync file transfer
     can trigger an out of bounds read of a heap based buffer,
     via a negative array index.
Checksums-Sha1:
 4d47032acd8d433aed0c926d8347856391ce9ed2 521340 rsync-dbgsym_3.4.1+ds1-5+deb13u1_armel.deb
 60465205666dd73b61b88ccd3dfb640a0a32f2fe 6516 rsync_3.4.1+ds1-5+deb13u1_armel-buildd.buildinfo
 14d6eb7cadd59928852baf196953847eb4240a58 402496 rsync_3.4.1+ds1-5+deb13u1_armel.deb
Checksums-Sha256:
 3e59e027cf582c562c0f673396c2d7cebec17ccbacd5a98ecd46d8a9e1942208 521340 rsync-dbgsym_3.4.1+ds1-5+deb13u1_armel.deb
 dbda3bb851ba2b6b70a3ab10d3f121a8138603a607b476c6baa4dcf621a25b20 6516 rsync_3.4.1+ds1-5+deb13u1_armel-buildd.buildinfo
 851baf8bb08168bf54333db5c61d278149de8d28207cc410a414eb9f95f98b84 402496 rsync_3.4.1+ds1-5+deb13u1_armel.deb
Files:
 59150965bdc42911d452e5976281ebcb 521340 debug optional rsync-dbgsym_3.4.1+ds1-5+deb13u1_armel.deb
 b2792c2bc04fd588dee861cff5468984 6516 net optional rsync_3.4.1+ds1-5+deb13u1_armel-buildd.buildinfo
 12de076ac31f9f777244359d0f6b7813 402496 net optional rsync_3.4.1+ds1-5+deb13u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=Kz+6
-----END PGP SIGNATURE-----