Format: 1.8 Date: Wed, 06 Dec 2017 10:33:24 -0300 Source: rsync Binary: rsync Architecture: ppc64el Version: 3.1.2-2ubuntu0.1 Distribution: artful Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Leonidas S. Barbosa Description: rsync - fast, versatile, remote (and local) file-copying tool Changes: rsync (3.1.2-2ubuntu0.1) artful-security; urgency=medium . * SECURITY UPDATE: bypass intended access restrictions - debian/patches/CVE-2017-17433.patch: check fname in recv_files sooner in receiver.c. - CVE-2017-17433 * SECURITY UPDATE: not check for fnamecmp filenames and does not apply sanitize_paths - debian/patches/CVE-2017-17434-part1.patch: check daemon filter against fnamecmp in receiver.c. - debian/patches/CVE-2017-17434-part2.patch: sanitize xname in rsync.c. - CVE-2017-17434 Checksums-Sha1: cbdd7b676b6e25eb5af727867dd5c0d8ab00cee8 3844 rsync_3.1.2-2ubuntu0.1_ppc64el.buildinfo 78b52fb06012ad1cf28358172bbb07957f054bc5 377440 rsync_3.1.2-2ubuntu0.1_ppc64el.deb Checksums-Sha256: 30700784baa0ab90fb8e258bd5549eaa6b31e52c071cec16c8a491852a395192 3844 rsync_3.1.2-2ubuntu0.1_ppc64el.buildinfo 680a44a0a0f40b10e5222a22626ba9bc9426f8c5e10849e7013bd15f35bf686f 377440 rsync_3.1.2-2ubuntu0.1_ppc64el.deb Files: dc800c428364f1b2aad060d94d6b83cd 3844 net optional rsync_3.1.2-2ubuntu0.1_ppc64el.buildinfo 856275dc5e84c7247900cde244de4763 377440 net optional rsync_3.1.2-2ubuntu0.1_ppc64el.deb Original-Maintainer: Paul Slootman