-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 13 Dec 2017 07:34:49 +0100 Source: rsync Binary: rsync Architecture: source Version: 3.1.2-2.1 Distribution: unstable Urgency: medium Maintainer: Paul Slootman <paul@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 880954 883665 883667 Description: rsync - fast, versatile, remote (and local) file-copying tool Changes: rsync (3.1.2-2.1) unstable; urgency=medium . * Non-maintainer upload. * Enforce trailing \0 when receiving xattr name values (CVE-2017-16548) (Closes: #880954) * Check fname in recv_files sooner (CVE-2017-17433) (Closes: #883667) * Sanitize xname in read_ndx_and_attrs (CVE-2017-17434) (Closes: #883665) * Check daemon filter against fnamecmp in recv_files() (CVE-2017-17434) (Closes: #883665) Checksums-Sha1: 81a3092612943efbff0b8d78dfbe1821821a5b73 1853 rsync_3.1.2-2.1.dsc 3e10704a64f190ecf346b29e8005be3b84b80894 35172 rsync_3.1.2-2.1.debian.tar.xz Checksums-Sha256: 0e62f46a991624707b10e4147ed6f873b694cdb4c58a4838d4f82d8b89ad81eb 1853 rsync_3.1.2-2.1.dsc 589213bd77aecb51ee39501d65a9f2b3efb6c349aa73ec912259d52702ae2b97 35172 rsync_3.1.2-2.1.debian.tar.xz Files: 66386c72811fb67987b471601b1b7b12 1853 net optional rsync_3.1.2-2.1.dsc 3f0c3af6c4f00f500e0954f81c0f08c8 35172 net optional rsync_3.1.2-2.1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAlowym1fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EufwP/iBBF6HBtNd25nYiBcq6biepXkNufLF1 Z0ob3aqsJhkqeSv+EEqRaC2qogcyAEVzhJYzgANjwDbJzutx7QVKzAbdmnxV2Q67 sjFH/xofig1jdihi98To3oqmbd+cpJk6Nl6AgoxAfdKks9j04SUDYKg6KF9XH2SX lIExeJ37p1IR2BkPJlq75890iEXXH6sm8gbeA2Sc897Pw7b+MLNWYVuoxjG/GfHd DStSRRdKjsH4++NwWLBVTPVF//VELMqw2ymEfl2rGdCc9VXute6dpNtIbNlFkNmP LykCdLtvV/HTd6JHrdvTIRltQChiT9dhoo74mjq8ohYXwxcGum1HbVdzAibm7b5z h0gyjCJ7tDjIG4VewX1i794i9w7L3dJh6qVLvha91A5oQk+2KVNUDjCnijSePac2 OPfQtF1DQWb2lzZc6ULf0qubpbEzkUdABt1ncD72QrSyhyAeh2krHzrUmnKwYKMW 4ScJ9EkaiBsJfmLy7KHqVI1fIn9/9KeXX8N6LiKQbLWu7hgaNKro3oiF/euzEZlN 3cJpWm+tyJrNCkKPgq1r7an+U1TWc0/rZXrucmvCXjJMlZtGujZtApbCCKCVdxIa vUfFxRvaCKGCM31D8Qua2IzMWhJGFDq7yPFjNNm7bv5zANBcBkoL05wslYfuo/kF HdSsfXA0CvWa =WU8f -----END PGP SIGNATURE-----