-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 27 Nov 2025 21:49:27 -0300
Source: rsync
Binary: rsync rsync-dbgsym
Architecture: mipsel
Version: 3.2.7-1+deb12u4
Distribution: bookworm
Urgency: medium
Maintainer: mipsel Build Daemon (mipsel-osuosl-05) <buildd_mips64el-mipsel-osuosl-05@buildd.debian.org>
Changed-By: Matheus Polkorny <mpolkorny@gmail.com>
Description:
 rsync      - fast, versatile, remote (and local) file-copying tool
Changes:
 rsync (3.2.7-1+deb12u4) bookworm; urgency=medium
 .
   * Team upload.
   * d/p/CVE-2025-10158.patch: Import upstream patch to fix CVE-2025-10158
 .
     A malicious client acting as the receiver of an rsync file transfer
     can trigger an out of bounds read of a heap based buffer,
     via a negative array index.
Checksums-Sha1:
 24f1143aa72e695155b393c27c77ffd61c595cdc 532932 rsync-dbgsym_3.2.7-1+deb12u4_mipsel.deb
 895e1e58263ebfe00a7b32080b0753065088948a 6855 rsync_3.2.7-1+deb12u4_mipsel-buildd.buildinfo
 30dd08273beb5410a7144c25300af9effd5e2f95 408256 rsync_3.2.7-1+deb12u4_mipsel.deb
Checksums-Sha256:
 4297102bde15793e543e8ce61c79ad4c2b04a91911877de9801b82990f073e72 532932 rsync-dbgsym_3.2.7-1+deb12u4_mipsel.deb
 75ec6a4d00df9d1f903026ad46c4b82c3952ec4d3637eff9d16e7fd47bd0e477 6855 rsync_3.2.7-1+deb12u4_mipsel-buildd.buildinfo
 9d1780a9f331557a6a68cda2adb19f857eab71ca3989ea9abcb517f45fa73eb0 408256 rsync_3.2.7-1+deb12u4_mipsel.deb
Files:
 62360624ab9438745b9e67ac03b7a57a 532932 debug optional rsync-dbgsym_3.2.7-1+deb12u4_mipsel.deb
 1bae596a1354e828d8f390837317140c 6855 net optional rsync_3.2.7-1+deb12u4_mipsel-buildd.buildinfo
 06480239a71abde0c7ceab5d560a639b 408256 net optional rsync_3.2.7-1+deb12u4_mipsel.deb

-----BEGIN PGP SIGNATURE-----
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=4Nhk
-----END PGP SIGNATURE-----