-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 27 Nov 2025 21:29:04 -0300
Source: rsync
Binary: rsync rsync-dbgsym
Architecture: arm64
Version: 3.4.1+ds1-5+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: arm Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Matheus Polkorny <mpolkorny@gmail.com>
Description:
 rsync      - fast, versatile, remote (and local) file-copying tool
Changes:
 rsync (3.4.1+ds1-5+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * d/p/CVE-2025-10158.patch: Import upstream patch to fix CVE-2025-10158
 .
     A malicious client acting as the receiver of an rsync file transfer
     can trigger an out of bounds read of a heap based buffer,
     via a negative array index.
Checksums-Sha1:
 63e2b22c11fdb933dc8fd3944a1a7ed35b8125bf 529312 rsync-dbgsym_3.4.1+ds1-5+deb13u1_arm64.deb
 6c4d5fab5f297e2dad685228da0eb6f6976b5bbf 6651 rsync_3.4.1+ds1-5+deb13u1_arm64-buildd.buildinfo
 9089439f9afd53cde454885254627828b101477f 408336 rsync_3.4.1+ds1-5+deb13u1_arm64.deb
Checksums-Sha256:
 2f4287273a2d2208509b7c94c5225ad8d4b1b0c08fd8e806033331dd3a4c2be6 529312 rsync-dbgsym_3.4.1+ds1-5+deb13u1_arm64.deb
 2c4cc5d2d7ff6f8299bf73a0c743184fdaa1c490d11ddf67eb6b14c3ac3ec034 6651 rsync_3.4.1+ds1-5+deb13u1_arm64-buildd.buildinfo
 20ac22a6c94f36ea50c09e2a8ec646fe646337aef8c007336270ec25e6b9dc6e 408336 rsync_3.4.1+ds1-5+deb13u1_arm64.deb
Files:
 e9236e3f745769496bbf74187be13546 529312 debug optional rsync-dbgsym_3.4.1+ds1-5+deb13u1_arm64.deb
 485c1fe7da65415c97f1192b63e44110 6651 net optional rsync_3.4.1+ds1-5+deb13u1_arm64-buildd.buildinfo
 f6625e356a4d8eac904bc7054d820038 408336 net optional rsync_3.4.1+ds1-5+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=jVYk
-----END PGP SIGNATURE-----