-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 27 Nov 2025 21:49:27 -0300
Source: rsync
Binary: rsync rsync-dbgsym
Architecture: armel
Version: 3.2.7-1+deb12u4
Distribution: bookworm
Urgency: medium
Maintainer: arm Build Daemon (arm-conova-02) <buildd_arm64-arm-conova-02@buildd.debian.org>
Changed-By: Matheus Polkorny <mpolkorny@gmail.com>
Description:
 rsync      - fast, versatile, remote (and local) file-copying tool
Changes:
 rsync (3.2.7-1+deb12u4) bookworm; urgency=medium
 .
   * Team upload.
   * d/p/CVE-2025-10158.patch: Import upstream patch to fix CVE-2025-10158
 .
     A malicious client acting as the receiver of an rsync file transfer
     can trigger an out of bounds read of a heap based buffer,
     via a negative array index.
Checksums-Sha1:
 d1845939ee1da8a82b8457e8b9ae68d8a7e16fc5 506056 rsync-dbgsym_3.2.7-1+deb12u4_armel.deb
 1fc1ce8a23201908037f731dd2976f4c5bb81da3 6915 rsync_3.2.7-1+deb12u4_armel-buildd.buildinfo
 b9f7edc16ef5b1cb4d219c447caa79efe44082de 393876 rsync_3.2.7-1+deb12u4_armel.deb
Checksums-Sha256:
 c895376eee3753ea9c6e66451405b5d8ee94199bea2fb0ccdda311c8b975ed15 506056 rsync-dbgsym_3.2.7-1+deb12u4_armel.deb
 9c2dd1f3ab025e5658a1da6ba490f1237a5e9cd6e052736ed59b074be314081b 6915 rsync_3.2.7-1+deb12u4_armel-buildd.buildinfo
 3b8b59b9c8e229bc3faea72a5c863309c630dc54b36e8cdf018a3cff6fbac446 393876 rsync_3.2.7-1+deb12u4_armel.deb
Files:
 5ca4fc4f18ad704546a49157c5e9651c 506056 debug optional rsync-dbgsym_3.2.7-1+deb12u4_armel.deb
 afe7296569453bb4e880a89c13aec3ac 6915 net optional rsync_3.2.7-1+deb12u4_armel-buildd.buildinfo
 553fed90f706e7004aece89a9a19a260 393876 net optional rsync_3.2.7-1+deb12u4_armel.deb

-----BEGIN PGP SIGNATURE-----
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=7q7f
-----END PGP SIGNATURE-----