Format: 1.8 Date: Thu, 18 Jan 2018 17:34:53 -0300 Source: rsync Binary: rsync Architecture: arm64 Version: 3.1.2-2ubuntu0.2 Distribution: artful Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Leonidas S. Barbosa Description: rsync - fast, versatile, remote (and local) file-copying tool Changes: rsync (3.1.2-2ubuntu0.2) artful-security; urgency=medium . * SECURITY UPDATE: receive_xattr function does not check for '\0' character allowing denial of service attacks - debian/patches/CVE-2017-16548.patch: enforce trailing \0 when receiving xattr values in xattrs.c. - CVE-2017-16548 * SECURITY UPDATE: Allows remote attacker to bypass argument - debian/patches/CVE-2018-5764.patch: Ignore --protect-args when already sent by client in options.c. - CVE-2018-5764 Checksums-Sha1: 2d2e43ed967043c0386ad9123b6a9253550d2a66 3840 rsync_3.1.2-2ubuntu0.2_arm64.buildinfo b2193af901136617334a6d4c3213dfc3710df709 307062 rsync_3.1.2-2ubuntu0.2_arm64.deb Checksums-Sha256: 697f131045862207779b1e4f316aa0a2292ac03f1f515aadfb6c5a64451ec99c 3840 rsync_3.1.2-2ubuntu0.2_arm64.buildinfo 7f2ebf07df3b6b8b460b476fed3b162ec503deaf8ed6bdc4288a96cd8efda6c1 307062 rsync_3.1.2-2ubuntu0.2_arm64.deb Files: dff1ceec3ae6ab1095f4e48da78ace72 3840 net optional rsync_3.1.2-2ubuntu0.2_arm64.buildinfo cc95e9dcec81c0701e197f3bad412db1 307062 net optional rsync_3.1.2-2ubuntu0.2_arm64.deb Original-Maintainer: Paul Slootman