Accepted rsync 3.0.9-4+deb7u2 (source amd64) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 19 Jan 2018 15:22:37 +1100
Source: rsync
Binary: rsync
Architecture: source amd64
Version: 3.0.9-4+deb7u2
Distribution: wheezy-security
Urgency: high
Maintainer: Paul Slootman <paul@debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
rsync - fast, versatile, remote (and local) file-copying tool
Closes: 887588
Changes:
rsync (3.0.9-4+deb7u2) wheezy-security; urgency=high
.
* CVE-2018-5764: Prevent remote attackers from being able to bypass the
argument-sanitization protection mechanism by ignoring --protect-args when
already sent by client. (Closes: #887588)
Checksums-Sha1:
8fae8481ec40b86f3a5bdbc46e9d640a624bcc6e 1687 rsync_3.0.9-4+deb7u2.dsc
c64c8341984aea647506eb504496999fd968ddfc 792725 rsync_3.0.9.orig.tar.gz
9b15b1f29691f501057228775f33dfe50ee77914 23717 rsync_3.0.9-4+deb7u2.diff.gz
9c8510aec8c345254a13a7d328038369b3495da4 368746 rsync_3.0.9-4+deb7u2_amd64.deb
Checksums-Sha256:
e683e2c145bd91d089b8d4b50412a7278ec3705eb1f8c13dfbc9808b6722de28 1687 rsync_3.0.9-4+deb7u2.dsc
30f10f8dd5490d28240d4271bb652b1da7a60b22ed2b9ae28090668de9247c05 792725 rsync_3.0.9.orig.tar.gz
f0a44763d5885bfc0b568670b2ffbdda0579ce82771c16dccd0cb6e8512584f0 23717 rsync_3.0.9-4+deb7u2.diff.gz
e2c61b1b2ccb67e232278fe3cf158e3117628376d63f61dd4ac61cd627433c29 368746 rsync_3.0.9-4+deb7u2_amd64.deb
Files:
97cd439e53359aad0306c383682aa5ff 1687 net optional rsync_3.0.9-4+deb7u2.dsc
5ee72266fe2c1822333c407e1761b92b 792725 net optional rsync_3.0.9.orig.tar.gz
8a5cbcded16ec1f799e01d5c0842cb6c 23717 net optional rsync_3.0.9-4+deb7u2.diff.gz
ef03010b41359865e2ba313e2c526fbd 368746 net optional rsync_3.0.9-4+deb7u2_amd64.deb
-----BEGIN PGP SIGNATURE-----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=YoOg
-----END PGP SIGNATURE-----