-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 27 Nov 2025 21:01:55 -0300 Source: rsync Architecture: source Version: 3.4.1+ds1-7 Distribution: unstable Urgency: medium Maintainer: Samuel Henrique <samueloph@debian.org> Changed-By: Matheus Polkorny <mpolkorny@gmail.com> Closes: 1121442 Changes: rsync (3.4.1+ds1-7) unstable; urgency=medium . * Team upload. . [ Arnaud Rebillout ] * d/control: Switch back to python3-cmarkgfm for all architectures . [ Matheus Polkorny ] * d/p/CVE-2025-10158.patch: Import upstream patch to fix CVE-2025-10158 . A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. (Closes: #1121442) Checksums-Sha1: b622433489f1e2f71fa9f88dc6b93c1a736ecf29 2156 rsync_3.4.1+ds1-7.dsc 35231ad8772e36db7a024a6c086bdc61e4349bb1 37352 rsync_3.4.1+ds1-7.debian.tar.xz 910bfb26c8f8a21829ee03a230fb205cb2e8c5d7 6760 rsync_3.4.1+ds1-7_amd64.buildinfo Checksums-Sha256: 3ef0fe6776d2ba60973a52b6c6acb1b232f4fb78b5b19ce29cabd4f1b9642353 2156 rsync_3.4.1+ds1-7.dsc 1afae79ff3efa55391e2ddf6a92e8df8abefb3acea4cd8219e6684904661d950 37352 rsync_3.4.1+ds1-7.debian.tar.xz 5acadca59602c371510d111c6807dfec470348670f699ce13bfd49a1de706fd3 6760 rsync_3.4.1+ds1-7_amd64.buildinfo Files: 21c1de727019d30159bd0a94141ed37a 2156 net optional rsync_3.4.1+ds1-7.dsc d6214a30912afec970f4467305642ca4 37352 net optional rsync_3.4.1+ds1-7.debian.tar.xz 50ecae422e24875963df35dc3fcca99e 6760 net optional rsync_3.4.1+ds1-7_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBdtqg34QX0sdAsVfu6n6rcz7RwcFAmko8L8ACgkQu6n6rcz7 Rwd5hw/9E8RyBSVBVjhIbWYzWV9hifO+arrNpaIifbgGsjuWXHSyHd1QItwYcsL8 1GTk3SPJOcGcMZva7YM4fhbvR0nL9h82+yCduMqPPUyhhhJdfe4i8hNl9Lq95+z3 BJjhi1t18oV0o9vKndbdiL4/H8aad5c+Fv7C9CZU/B4Lh2G73TS1Oo18Vtdfo+k6 MdnM0Prok9mo7t/JHnGIvXNw+YR4KOPwI+VbHZmOjLuwFkS8USAIoy8Pv7rnwRIt cN2tNIta47tejdDQ6r/ou/0K+263VOQhbUL1t+MDtltj0qK+6p+eKKDr+dJLd1VZ 11cFrCJikyOvv95j/Ea9PBE59rMIRs/omBU/U/eW391zOdmshfQzPJGo0I9hsBMn xNebqrUf/hRk8+EBcVifmKB5sR3JFDq8ZDmtukUUqncCQQWcBDgiUPcfNdNSpbv1 lUSwv3AnBeg87OMpaipnxhCPZSXHf4JewTEQSVpCOnh52kyI2SOQdKFmleymvXFm 8IXfrdMXo1mEM4pH8j8xENU+LsVGsbfz/Qp4x2sebWvNuwqqXJAEYP2PUZuLkObU qbGY7iTgItdOOhX7A7Pi58iEtHW7BE9+GrsDN5C0U0aApkG5MZ0khCasLDJfkL01 34c4P4kv6WO+DiZqwxYiRFSssMBJQZOk5B1GrozWvBLy7GTe+yk= =ECE4 -----END PGP SIGNATURE-----
