-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 27 Nov 2025 21:29:04 -0300
Source: rsync
Binary: rsync rsync-dbgsym
Architecture: s390x
Version: 3.4.1+ds1-5+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Matheus Polkorny <mpolkorny@gmail.com>
Description:
 rsync      - fast, versatile, remote (and local) file-copying tool
Changes:
 rsync (3.4.1+ds1-5+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * d/p/CVE-2025-10158.patch: Import upstream patch to fix CVE-2025-10158
 .
     A malicious client acting as the receiver of an rsync file transfer
     can trigger an out of bounds read of a heap based buffer,
     via a negative array index.
Checksums-Sha1:
 7e1367a6baaa3197557973cb106d840f198f73ba 530452 rsync-dbgsym_3.4.1+ds1-5+deb13u1_s390x.deb
 232426240f3d6eaa1a1640d1486c8847238b78e7 6526 rsync_3.4.1+ds1-5+deb13u1_s390x-buildd.buildinfo
 5d5c348a0687ce7118968f3548201653d32b5e38 424012 rsync_3.4.1+ds1-5+deb13u1_s390x.deb
Checksums-Sha256:
 b0f6987d196f9935add134bac76c926cea6d15c6979da407e2b1d1788b2362cb 530452 rsync-dbgsym_3.4.1+ds1-5+deb13u1_s390x.deb
 92c67bf3b725e9dbe84f8908d54252836e02b96bb8e332e3b85b9009237b63d5 6526 rsync_3.4.1+ds1-5+deb13u1_s390x-buildd.buildinfo
 39dbe88decc2780bde58f73754d4a7bd71c4ea94e0e2abaa0e753c1bc750526e 424012 rsync_3.4.1+ds1-5+deb13u1_s390x.deb
Files:
 a6f3e34144d1c49d955b52c69d40127a 530452 debug optional rsync-dbgsym_3.4.1+ds1-5+deb13u1_s390x.deb
 fc273677bf4cf7af8d0c83c20d7ecc97 6526 net optional rsync_3.4.1+ds1-5+deb13u1_s390x-buildd.buildinfo
 549cfa14fd679fd7789d21eeec88240a 424012 net optional rsync_3.4.1+ds1-5+deb13u1_s390x.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEENly2ANlpa4eeqnluvVOPI7pYNpgFAmlJrwoACgkQvVOPI7pY
NpjN3A//QCbOD1fqC0HoEJHQwmflCkrdfJwkInv1hEaI2jGjhAktZZaKjb4XT3po
Pbhc3Bs1e3oiU1EldbJk2KT8aBqQqu8MaFJKEhsmZgJdi1Afz1O0UWkCv/T6AA9S
NHmMdKXqLB770ZyxagyrJxrUnZ8+kNSE1GhCOorY/lu9DTYejyd3fbOXNYxqLFGv
TFXmm74wqfKdh7N9WxbhexOcCu5F+ngZBLIUlRaZyfdJVDtJ+2XQDCo9X7n2cIqh
JDIQZ/PmblzwULSFBF8Z2N5Cpxct1N0R1MKU4wgMyapd81pZZVLwFAbnz/oHXAHp
tSQfUbkoGxt4nQ3qHDQj7uZPpZV0FlJel80sat35EqjD7DoHyNfUgdoK9mAFFCq4
6y2n/SgenAvhk67RrqPNMtTtO8XfK7Gh/5+HZo9E7RBGjMBZsiSPVLhyHD7pSa/m
wYYAeTYiP+9sCiySS20kQkNKtXO/tAAbGAIwAXrxqG5ZK9P6D+8cjR4s85pb2Si+
ufwT62MTAhFHrS4PbafSjo0ywvUEwKHWT1ih1lmuP8QjySxMK6kCoC59PtVqjHC6
xXtJSJIVZZT7hDg8KNn0GIqjRRA/9kzu3DhogCUK2t+saiYunir19iD7gMJ7CInN
UuNRvKUEeJ3/sZ+NI170R50Mz1IuKyVnxaS6nTC6xU8qbzdZMPA=
=KD0E
-----END PGP SIGNATURE-----