-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 12 Jan 2025 19:03:02 +0100
Source: rsync
Architecture: source
Version: 3.2.3-4+deb11u2
Distribution: bullseye-security
Urgency: high
Maintainer: Paul Slootman <paul@debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Changes:
rsync (3.2.3-4+deb11u2) bullseye-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* CVE-2024-12085
prevent information leak off the stack
* CVE-2024-12086
- refuse fuzzy options when fuzzy not selected
- added secure_relative_open()
- receiver: use secure_relative_open() for basis file
- disallow ../ elements in relpath for secure_relative_open
* CVE-2024-12087
- Refuse a duplicate dirlist.
- range check dir_ndx before use
* CVE-2024-12088
make --safe-links stricter
* CVE-2024-12747
fixed symlink race condition in sender
Checksums-Sha1:
46269bb5561daf8e31c0929630ffec9830db99d8 2422 rsync_3.2.3-4+deb11u2.dsc
00823f43901e7da39f3f0daf20ec9efae47e959e 1069784 rsync_3.2.3.orig.tar.gz
770d59f01d28374a3ff3603fefe524589a4f3237 195 rsync_3.2.3.orig.tar.gz.asc
bf8a7b76a3adeeccbacf1a9793a37e16bef2fe6e 37460 rsync_3.2.3-4+deb11u2.debian.tar.xz
6b6997b93c5ca0f2f49f2c542d86b188e0bd863b 6164 rsync_3.2.3-4+deb11u2_source.buildinfo
Checksums-Sha256:
dc65d8ca2842eca447a698d0d29c9af31a3670bec2185324a155a9bfafe628c4 2422 rsync_3.2.3-4+deb11u2.dsc
becc3c504ceea499f4167a260040ccf4d9f2ef9499ad5683c179a697146ce50e 1069784 rsync_3.2.3.orig.tar.gz
2e363382a60e7faa6762f560756cc0f3b8116c313eea7fe5fbfc5fed5b2f4f74 195 rsync_3.2.3.orig.tar.gz.asc
6258b12dbf727fa6daaf5b00ecd69866ecb50c0e9e7909a222a5cd75ac06ddab 37460 rsync_3.2.3-4+deb11u2.debian.tar.xz
86b1d800eb01ccedff4f3682a08dc1beba697fb6887778b069f16ad556d9f4b7 6164 rsync_3.2.3-4+deb11u2_source.buildinfo
Files:
c2242399e23dac649c47a50969789eb1 2422 net optional rsync_3.2.3-4+deb11u2.dsc
209f8326f5137d8817a6276d9577a2f1 1069784 net optional rsync_3.2.3.orig.tar.gz
64bb0b6f7331b8535f44e1383156a515 195 net optional rsync_3.2.3.orig.tar.gz.asc
2bc9e735966bbbbf2cc1381accf65f84 37460 net optional rsync_3.2.3-4+deb11u2.debian.tar.xz
298bdab142289530f68340dbd591a684 6164 net optional rsync_3.2.3-4+deb11u2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=62Lm
-----END PGP SIGNATURE-----
Attachment:
pgp4vf0nGWk2t.pgp
Description: PGP signature