-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 27 Nov 2025 21:29:04 -0300
Source: rsync
Binary: rsync rsync-dbgsym
Architecture: riscv64
Version: 3.4.1+ds1-5+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-osuosl-02) <buildd_riscv64-rv-osuosl-02@buildd.debian.org>
Changed-By: Matheus Polkorny <mpolkorny@gmail.com>
Description:
 rsync      - fast, versatile, remote (and local) file-copying tool
Changes:
 rsync (3.4.1+ds1-5+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * d/p/CVE-2025-10158.patch: Import upstream patch to fix CVE-2025-10158
 .
     A malicious client acting as the receiver of an rsync file transfer
     can trigger an out of bounds read of a heap based buffer,
     via a negative array index.
Checksums-Sha1:
 8a6f3274df6f55ea405b640ac55d988a4064c32c 513232 rsync-dbgsym_3.4.1+ds1-5+deb13u1_riscv64.deb
 bafe17d058cc918785f547733df798151334911a 6608 rsync_3.4.1+ds1-5+deb13u1_riscv64-buildd.buildinfo
 019f6e4c40d068d90dccc0c077fd5f56199c8d9a 430772 rsync_3.4.1+ds1-5+deb13u1_riscv64.deb
Checksums-Sha256:
 805c3290b18c9d8473dba0f7db1e1a3c875aa363ef2be240a8f0470dd112b073 513232 rsync-dbgsym_3.4.1+ds1-5+deb13u1_riscv64.deb
 2eb6f75f2361e57d989bd95dc184b0748d925683622ff915b3fb9eaac5be2f20 6608 rsync_3.4.1+ds1-5+deb13u1_riscv64-buildd.buildinfo
 28ac806752f0f7ce911c130a20fdf051cd9ee2e685209d6c5ef46d60915535a0 430772 rsync_3.4.1+ds1-5+deb13u1_riscv64.deb
Files:
 bb15459fa285b5540eb19348c5942cd6 513232 debug optional rsync-dbgsym_3.4.1+ds1-5+deb13u1_riscv64.deb
 8dbc501825cc85ade3ade0b05bc2389c 6608 net optional rsync_3.4.1+ds1-5+deb13u1_riscv64-buildd.buildinfo
 930ec1a4476f0ffb5c6b940f54fdceb3 430772 net optional rsync_3.4.1+ds1-5+deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=xTkI
-----END PGP SIGNATURE-----