Format: 1.8 Date: Thu, 18 Jan 2018 16:43:26 -0300 Source: rsync Binary: rsync Architecture: armhf Version: 3.0.9-1ubuntu1.3 Distribution: precise Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Leonidas S. Barbosa Description: rsync - fast, versatile, remote (and local) file-copying tool Changes: rsync (3.0.9-1ubuntu1.3) precise-security; urgency=medium . * SECURITY UPDATE: receive_xattr function does not check for '\0' character allowing denial of service attacks - debian/patches/CVE-2017-16548.patch: enforce trailing \0 when receiving xattr values in xattrs.c. - CVE-2017-16548 * SECURITY UPDATE: Allows remote attacker to bypass argument - debian/patches/CVE-2018-5764.patch: Ignore --protect-args when already sent by client in options.c. - CVE-2018-5764 Checksums-Sha1: dba820bb1e117e1eb6f47f02e0c14932d3bb2b00 283396 rsync_3.0.9-1ubuntu1.3_armhf.deb Checksums-Sha256: d19d9fb0c680a05be3cb88e216dce7542ab5a67b6b5344c3ddbaa9146840767f 283396 rsync_3.0.9-1ubuntu1.3_armhf.deb Files: 477385e45bc678b7721936784999352c 283396 net optional rsync_3.0.9-1ubuntu1.3_armhf.deb Original-Maintainer: Paul Slootman