From foo@bar  Wed Nov  4 08:20:05 2026
Format: 1.8
Date: Tue, 03 Nov 2026 22:53:12 -0800
Source: rsync
Binary: rsync rsync-dbgsym
Architecture: sparc64
Version: 3.5.2+ds1-1
Distribution: sid
Urgency: medium
Maintainer: sparc64 Build Daemon (sompek) <buildd2@sompek.debian.net>
Changed-By: Samuel Henrique <samueloph@debian.org>
Description:
 rsync      - fast, versatile, remote (and local) file-copying tool
Closes: 1149604
Changes:
 rsync (3.5.2+ds1-1) unstable; urgency=medium
 .
   * New upstream version 3.5.2+ds1
   * Fix CVE-2026-119741: a malicious receiver can supply weak checksums which
     collide with consecutive rolling windows and make the sender calculate a
     full strong checksum at every byte offset. Repeating this across public
     daemon connections can exhaust host CPU. Thanks to Dianne Skoll for
     reporting the Debian bug (closes: #1149604).
Checksums-Sha1:
 18d183badffa268e6fa54785054c16f96441232b 645044 rsync-dbgsym_3.5.2+ds1-1_sparc64.deb
 177e1dc727d1ac8f087ccb33a5f97c80a2b66b9f 6484 rsync_3.5.2+ds1-1_sparc64.buildinfo
 211719f7e80bf58a55710c3da90fa4682b5a79d4 476472 rsync_3.5.2+ds1-1_sparc64.deb
Checksums-Sha256:
 c70b53875f1c1f7d9e64ef1cad5fb247c32af73af0caf36648b2cc7e9a80d3df 645044 rsync-dbgsym_3.5.2+ds1-1_sparc64.deb
 595d548bbacbf7353813a06df23fff45ff41b92e8b50c32071b3b80f29ddbcfe 6484 rsync_3.5.2+ds1-1_sparc64.buildinfo
 c131a2ebeeda17b704df389b9b33a9cc1df5780447be5a8f1ab6696d0c8b13b5 476472 rsync_3.5.2+ds1-1_sparc64.deb
Files:
 91113a7f32fa9aca0399697d7617e584 645044 debug optional rsync-dbgsym_3.5.2+ds1-1_sparc64.deb
 1baa70d133432d458226ff3ff8755525 6484 net optional rsync_3.5.2+ds1-1_sparc64.buildinfo
 1119e7192d7bc094f16fa47e50f337b0 476472 net optional rsync_3.5.2+ds1-1_sparc64.deb
Signed-By: Debian buildd autosigning key for sompek <buildd_sparc64-sompek@buildd.debian.org>

