Accepted rsync 3.2.5-1 (source) into unstable
- To: debian-devel-changes@lists.debian.org
- Subject: Accepted rsync 3.2.5-1 (source) into unstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Tue, 16 Aug 2022 11:45:20 +0000
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Subject: Content-Transfer-Encoding:Content-Type:MIME-Version:To:Reply-To:From:Cc: Content-ID:Content-Description:In-Reply-To:References; bh=C5Qz2WMskF3AAejsWAbfU0Q+cUh77sjowjnu6tpcggg=; b=OdRon+uEpyvFrY2ZBZ3pqHaiQn 4esVuyNJIcyXp8dCNOKp7lHKvXgd/rN3atheR0KJTEnF3FtaMMYOjxl7qCtM6mzHRowAPEi2pm8gD jFkTM45RpasHWhyEETbaUHyuqPRdm8HwNo1qzMz5IVcD3HF5KxuPmYBMvvhFMASFVRPgVJYcs3mCT +5L2LoPeqsdtO76eMpsxvdL08ghL4n2W7dcfXU8kSYJz14H17vqOIYRhdjsytLffDHgKXg81AiWdr LuXFAfbAJkLEjKQYMXA7VOv3F1UR1/49sCurkNQ/8iJnxP4IGaxwMYLENxrQAjpyuE+mXSdBgDuGb 5HaaIIdw==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1oNv0a-003Vic-0v@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 16 Aug 2022 11:03:48 +0100
Source: rsync
Architecture: source
Version: 3.2.5-1
Distribution: unstable
Urgency: medium
Maintainer: Paul Slootman <paul@debian.org>
Changed-By: Samuel Henrique <samueloph@debian.org>
Closes: 1009981 1016543
Changes:
rsync (3.2.5-1) unstable; urgency=medium
.
* New upstream version 3.2.5
- Added some file-list safety checking that helps to ensure that a rogue
sending rsync can't add unrequested top-level names and/or include
recursive names that should have been excluded by the sender. These
extra safety checks only require the receiver rsync to be updated. When
dealing with an untrusted sending host, it is safest to copy into a
dedicated destination directory for the remote content (i.e. don't copy
into a destination directory that contains files that aren't from the
remote host unless you trust the remote host)
(closes: #1016543, CVE-2022-29154).
- The build date that goes into the manpages is now based on the
developer's release date, not on the build's local-timezone
interpretation of the date (closes: #1009981)
Checksums-Sha1:
061ba53c8da88009921a89dc64c639f9858a09b4 2276 rsync_3.2.5-1.dsc
26baded8871b9e2406add210cdbfa744c94642d2 1129957 rsync_3.2.5.orig.tar.gz
5e066f34f9846b70039af0ce868b2edb667b2d98 195 rsync_3.2.5.orig.tar.gz.asc
4e5a8c93f7a44da9a83b17e2c3e1995fb938affe 25612 rsync_3.2.5-1.debian.tar.xz
b9005c98a54f3c7d7698bffc78becc37ef7b6374 7006 rsync_3.2.5-1_amd64.buildinfo
Checksums-Sha256:
9507370fefafbebedb5970d5720b75edab7c56d263b3775cbc69d02421f8ba5a 2276 rsync_3.2.5-1.dsc
2ac4d21635cdf791867bc377c35ca6dda7f50d919a58be45057fd51600c69aba 1129957 rsync_3.2.5.orig.tar.gz
bd2ea7f1a057043c09797c18a5a18a78dcf453e11fbbdf8354a39eca1e67c9cc 195 rsync_3.2.5.orig.tar.gz.asc
b5494c5138dd35aaad2c8939fdc49ca997baa618c3583834eb4e378e9fd0194d 25612 rsync_3.2.5-1.debian.tar.xz
786af16f711ca89eb74923a8dbf67bde5130dfcca009d78cbeea99d0c179f6b8 7006 rsync_3.2.5-1_amd64.buildinfo
Files:
de9e68d24b8f3c5bbd70340df7d6f423 2276 net optional rsync_3.2.5-1.dsc
2fd61dfd76d39098c3be6eb5d54bb633 1129957 net optional rsync_3.2.5.orig.tar.gz
ed2438496f401c3eff8979e3263e2515 195 net optional rsync_3.2.5.orig.tar.gz.asc
28cc7d3e1bd45f63894ff37f7f17abfb 25612 net optional rsync_3.2.5-1.debian.tar.xz
428c1f840fccf91a82897cfb1a3c3b22 7006 net optional rsync_3.2.5-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=dVEm
-----END PGP SIGNATURE-----