-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 27 Nov 2025 21:49:27 -0300
Source: rsync
Binary: rsync rsync-dbgsym
Architecture: s390x
Version: 3.2.7-1+deb12u4
Distribution: bookworm
Urgency: medium
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Matheus Polkorny <mpolkorny@gmail.com>
Description:
 rsync      - fast, versatile, remote (and local) file-copying tool
Changes:
 rsync (3.2.7-1+deb12u4) bookworm; urgency=medium
 .
   * Team upload.
   * d/p/CVE-2025-10158.patch: Import upstream patch to fix CVE-2025-10158
 .
     A malicious client acting as the receiver of an rsync file transfer
     can trigger an out of bounds read of a heap based buffer,
     via a negative array index.
Checksums-Sha1:
 5fb34fea92e7dc941c68d84db802a16f70bf5777 505124 rsync-dbgsym_3.2.7-1+deb12u4_s390x.deb
 aa8c8c6253cc344f002982ce946d898dcddb79d4 6945 rsync_3.2.7-1+deb12u4_s390x-buildd.buildinfo
 9788dcb10650dc8a9833d7a24c8394c26efcb11b 399984 rsync_3.2.7-1+deb12u4_s390x.deb
Checksums-Sha256:
 300a2ec9a61714428b99ba754bf87e1e9b0a9b425031ccffa30b15d87b114829 505124 rsync-dbgsym_3.2.7-1+deb12u4_s390x.deb
 f872a5cbfe2add8ff53db7858d1937fe8f102aa72b6e1729080c8b77905abe33 6945 rsync_3.2.7-1+deb12u4_s390x-buildd.buildinfo
 17f33443ee0f093c56375c156c1167d444aabffb9876c4c18c1e8187d1db9c96 399984 rsync_3.2.7-1+deb12u4_s390x.deb
Files:
 1f4fd247af333cedfea6ddd9bca59bf2 505124 debug optional rsync-dbgsym_3.2.7-1+deb12u4_s390x.deb
 c84898739c1de8bfe1c8c4821eabdddf 6945 net optional rsync_3.2.7-1+deb12u4_s390x-buildd.buildinfo
 3bccccfaec534a1ac224ef144456dfc0 399984 net optional rsync_3.2.7-1+deb12u4_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=r7Z0
-----END PGP SIGNATURE-----