-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 19 Jan 2018 15:22:37 +1100 Source: rsync Binary: rsync Architecture: source amd64 Version: 3.0.9-4+deb7u2 Distribution: wheezy-security Urgency: high Maintainer: Paul Slootman <paul@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: rsync - fast, versatile, remote (and local) file-copying tool Closes: 887588 Changes: rsync (3.0.9-4+deb7u2) wheezy-security; urgency=high . * CVE-2018-5764: Prevent remote attackers from being able to bypass the argument-sanitization protection mechanism by ignoring --protect-args when already sent by client. (Closes: #887588) Checksums-Sha1: 8fae8481ec40b86f3a5bdbc46e9d640a624bcc6e 1687 rsync_3.0.9-4+deb7u2.dsc c64c8341984aea647506eb504496999fd968ddfc 792725 rsync_3.0.9.orig.tar.gz 9b15b1f29691f501057228775f33dfe50ee77914 23717 rsync_3.0.9-4+deb7u2.diff.gz 9c8510aec8c345254a13a7d328038369b3495da4 368746 rsync_3.0.9-4+deb7u2_amd64.deb Checksums-Sha256: e683e2c145bd91d089b8d4b50412a7278ec3705eb1f8c13dfbc9808b6722de28 1687 rsync_3.0.9-4+deb7u2.dsc 30f10f8dd5490d28240d4271bb652b1da7a60b22ed2b9ae28090668de9247c05 792725 rsync_3.0.9.orig.tar.gz f0a44763d5885bfc0b568670b2ffbdda0579ce82771c16dccd0cb6e8512584f0 23717 rsync_3.0.9-4+deb7u2.diff.gz e2c61b1b2ccb67e232278fe3cf158e3117628376d63f61dd4ac61cd627433c29 368746 rsync_3.0.9-4+deb7u2_amd64.deb Files: 97cd439e53359aad0306c383682aa5ff 1687 net optional rsync_3.0.9-4+deb7u2.dsc 5ee72266fe2c1822333c407e1761b92b 792725 net optional rsync_3.0.9.orig.tar.gz 8a5cbcded16ec1f799e01d5c0842cb6c 23717 net optional rsync_3.0.9-4+deb7u2.diff.gz ef03010b41359865e2ba313e2c526fbd 368746 net optional rsync_3.0.9-4+deb7u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlphdzMACgkQHpU+J9Qx HlhtOg/9GHbwD99Qf1ScQDxj7Y+ZTqUWg4rLdCppWqPsmj56RwSnu3D9lpzEnNoP 7eCqUtrqTX+/mrvDsMUzBOWxJOmMUBp7iN5hEzFR22GCzdfwyMIfr4+FnEOJo0p3 SL+uuriLuBEnjEA6R+FiKWV9tF7Zp4TyREJ80SGGAioMONvxG7V2ochNWA6UP33f 20L5qSb/SZRnn5+xKRF0xPzzu0Zo5AgIJaAqRIb2mtds7BTg0iJLV7ZViVT2hTjR RTVgYDDIkzw1pXwRA6sDnOW1+xbXxznQlxTvWMlq5rQAc1sOWg8iFPztrZ10BzO0 AXLwSbKLWDpb0iuJ+ql/a/gUySVc6fWdbyFVa/svaUR1xLWxnQhePgF9iEElY62B 52DuVFIEchmtynB/D5r3FS/oxVD0WThiVosPF7oAcRWDCjJFonaF8HFtLZt60gZa X7HkRupaHt7lkUbE5GHUnhTqB1atn9zPmeN0+RFGnAaW9x7qdKAndZ5NuD53hyeK s4TNJOw2nOHXvzIP41Yfs9/ir42iHp6xJRUH3sGskofIo2pMVsU91Ygf68W1+YXX XrwjWoBdJW6VI1DodRqQQlH4zXS2iPZZo0kWngPQ/Dk61feBmma5iAfuO6Jzd81h qwXSzcvx76+kA+6vDJgo/qB6bE07Lm3B8C0o69UJwJl+KAR6cXU= =YoOg -----END PGP SIGNATURE-----