Format: 1.8 Date: Thu, 18 Jan 2018 17:00:13 -0300 Source: rsync Binary: rsync Architecture: ppc64el Version: 3.1.0-2ubuntu0.4 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Leonidas S. Barbosa Description: rsync - fast, versatile, remote (and local) file-copying tool Changes: rsync (3.1.0-2ubuntu0.4) trusty-security; urgency=medium . * SECURITY UPDATE: receive_xattr function does not check for '\0' character allowing denial of service attacks - debian/patches/CVE-2017-16548.patch: enforce trailing \0 when receiving xattr values in xattrs.c. - CVE-2017-16548 * SECURITY UPDATE: Allows remote attacker to bypass argument - debian/patches/CVE-2018-5764.patch: Ignore --protect-args when already sent by client in options.c. - CVE-2018-5764 Checksums-Sha1: b4ec199037ee21a3511d9a08cb42d588781c14a7 271792 rsync_3.1.0-2ubuntu0.4_ppc64el.deb Checksums-Sha256: 0e423f47b193409fadd7cc703616278184225694bafd96796cd82974e185a634 271792 rsync_3.1.0-2ubuntu0.4_ppc64el.deb Files: 9f72e7d02b067c2fc76bdb5b5d69e19b 271792 net optional rsync_3.1.0-2ubuntu0.4_ppc64el.deb Original-Maintainer: Paul Slootman