Bug#924642: stretch-pu: package rsync/3.1.2-1+deb9u1
Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian.org@packages.debian.org
Usertags: pu
There are a couple of CVEs that have been fixed by 3.1.2-1+deb9u2.
After discussing this with a member of the security team it was not
considered important enough to warrant a DSA, but it would be good if it
could be included in a point release for stretch.
The changelog is:
* Apply CVEs from 2016 to the zlib code.
closes:#924509
The only change was the addition of 4 patches to the zlib code.
The uploaded version was compiled on a stretch system.
Thanks!
Paul
-- System Information:
Debian Release: buster/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'stable'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.17.6-wurtel-ws (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)
Reply to: