-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 27 Nov 2025 21:29:04 -0300
Source: rsync
Binary: rsync rsync-dbgsym
Architecture: ppc64el
Version: 3.4.1+ds1-5+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) <buildd_ppc64el-ppc64el-osuosl-02@buildd.debian.org>
Changed-By: Matheus Polkorny <mpolkorny@gmail.com>
Description:
 rsync      - fast, versatile, remote (and local) file-copying tool
Changes:
 rsync (3.4.1+ds1-5+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * d/p/CVE-2025-10158.patch: Import upstream patch to fix CVE-2025-10158
 .
     A malicious client acting as the receiver of an rsync file transfer
     can trigger an out of bounds read of a heap based buffer,
     via a negative array index.
Checksums-Sha1:
 58af8eea8954c20670d11e3e4457bef01dfdb1f5 550284 rsync-dbgsym_3.4.1+ds1-5+deb13u1_ppc64el.deb
 02e5171e5a52fbdb9b9096b89d24e4aa086d520e 6663 rsync_3.4.1+ds1-5+deb13u1_ppc64el-buildd.buildinfo
 ded8bdc19a81d699304c52143a5825a9ceec3f81 435752 rsync_3.4.1+ds1-5+deb13u1_ppc64el.deb
Checksums-Sha256:
 92913edaea9296cd5929e976f57bebc356c1c31d704610e6aed77a5e0071c7e0 550284 rsync-dbgsym_3.4.1+ds1-5+deb13u1_ppc64el.deb
 1d0af40f3a523c6884d15604cc766adf68ab7d7f6e0d3c8ac0268839669075db 6663 rsync_3.4.1+ds1-5+deb13u1_ppc64el-buildd.buildinfo
 1e64db1c000a04544e473d97a577b0174ea0dc4f89d78c84141d929c3055aa32 435752 rsync_3.4.1+ds1-5+deb13u1_ppc64el.deb
Files:
 2f640181fc1712aa550dce8316b55d75 550284 debug optional rsync-dbgsym_3.4.1+ds1-5+deb13u1_ppc64el.deb
 c3fb3bfd54c679809fcbaac4d64432f7 6663 net optional rsync_3.4.1+ds1-5+deb13u1_ppc64el-buildd.buildinfo
 7571f691e9e64c92f33a521419a09766 435752 net optional rsync_3.4.1+ds1-5+deb13u1_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=u9FK
-----END PGP SIGNATURE-----