-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 27 Nov 2025 21:29:04 -0300
Source: rsync
Binary: rsync rsync-dbgsym
Architecture: i386
Version: 3.4.1+ds1-5+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Matheus Polkorny <mpolkorny@gmail.com>
Description:
 rsync      - fast, versatile, remote (and local) file-copying tool
Changes:
 rsync (3.4.1+ds1-5+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * d/p/CVE-2025-10158.patch: Import upstream patch to fix CVE-2025-10158
 .
     A malicious client acting as the receiver of an rsync file transfer
     can trigger an out of bounds read of a heap based buffer,
     via a negative array index.
Checksums-Sha1:
 8b2430cd0275c5b09db06c452470aa28c9ea69b0 469596 rsync-dbgsym_3.4.1+ds1-5+deb13u1_i386.deb
 9ce35c9504824e13ee7f358513a84cd4dc88c7a1 6565 rsync_3.4.1+ds1-5+deb13u1_i386-buildd.buildinfo
 a786d12669b7cdafc07127e2f15d342802db0fdc 436052 rsync_3.4.1+ds1-5+deb13u1_i386.deb
Checksums-Sha256:
 b0e7f4e3c86ef426a08ca2aa9d395273eaa2349faf86184012fccca01eaafe81 469596 rsync-dbgsym_3.4.1+ds1-5+deb13u1_i386.deb
 6238b91e3ad0fba78254afde2af095455edad3eff457a632b65f38944d7295b5 6565 rsync_3.4.1+ds1-5+deb13u1_i386-buildd.buildinfo
 f7bcb7ea557b8b1980505fd3dfd424dd7d0136b28053cc3846926cfdbad7bff7 436052 rsync_3.4.1+ds1-5+deb13u1_i386.deb
Files:
 29870fb9ba6399c3e85337a44395d155 469596 debug optional rsync-dbgsym_3.4.1+ds1-5+deb13u1_i386.deb
 4b261618bfcfd84944e20a24ca68fb11 6565 net optional rsync_3.4.1+ds1-5+deb13u1_i386-buildd.buildinfo
 9c03a152fdf9ab6dc9c6522bc95fb050 436052 net optional rsync_3.4.1+ds1-5+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=OKTd
-----END PGP SIGNATURE-----