-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 07 Nov 2026 14:03:56 -0800 Source: rsync Architecture: source Version: 3.5.0+ds1-0+deb13u2 Distribution: trixie Urgency: medium Maintainer: Samuel Henrique Changed-By: Samuel Henrique Closes: 1149604 Changes: rsync (3.5.0+ds1-0+deb13u2) trixie; urgency=medium . * Fix CVE-2026-119741: Unauthenticated attackers pulling from a public daemon module can exhaust sender CPU across concurrent connections (closes: #1149604). Checksums-Sha1: 83076a3fe0da6842ef8a763ddd2a353170c51fa0 2201 rsync_3.5.0+ds1-0+deb13u2.dsc be3c1e21bd18aed9a6d48dc583054bf4ff45cbcb 91120 rsync_3.5.0+ds1-0+deb13u2.debian.tar.xz 57d5008e1a6c647b16e62ff7c85f56f1d25249dc 7178 rsync_3.5.0+ds1-0+deb13u2_amd64.buildinfo Checksums-Sha256: b0e48635fb856621184c8c8ec468db43018f8ba7260b666ff9bc8c0ddef05bc8 2201 rsync_3.5.0+ds1-0+deb13u2.dsc 01a96c672e41ad50a03b3f8db243cd0c182c9cf5319079aacd2fb660d30bbe0b 91120 rsync_3.5.0+ds1-0+deb13u2.debian.tar.xz ee44a6e941865ae8f7b82a7ac3ad0c70750495c21251888c070c52ee52032f20 7178 rsync_3.5.0+ds1-0+deb13u2_amd64.buildinfo Files: 4bb25f98af1c963ec7d1a2a0691f0a71 2201 net optional rsync_3.5.0+ds1-0+deb13u2.dsc d4ed10dd710f78bfc571645546a2fe92 91120 net optional rsync_3.5.0+ds1-0+deb13u2.debian.tar.xz ed21095b6eca92e9fcd3f4fd85f410e3 7178 net optional rsync_3.5.0+ds1-0+deb13u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBdtqg34QX0sdAsVfu6n6rcz7RwcFAmrvrHMACgkQu6n6rcz7 Rwd/HA/+PRFQjNS29e7TQ2uRDmEArGsQONpm+S9aU8oTHMKcfR03s5UVS3NK9XbW b2NM2kixYK4YLpnNKUz6T9q7KwVFZFaMn090M/yrKWxL1pQydCzE5WNrqHQHcb79 CW+JnCjoFeMah/T/rZB1XiWuyJDIYAKJ942tkmxxwwD3thw/1xqKAjharCuToSG2 5zVu+f0gEw4S4kWj2VcXy62aZwBJJdvCfjieQPiT9CxLSjOTyZj5Oec8vo7vm9DO r/hMibPEWr4a8h82EZHA/GOA9YVMrKJANk9Ssz7D1ZCsYwyB61xb6VE9t9dQmOC+ XApy8zuwXo5FHSVP+0gO8F5oz4WZR8HA6a95nsZatBLfNJF65BfEbpLIDXB2BWre FwSnawMRGoPPX142j/Evp4LlefX9lXtu28BaqzSklvDjzgsaJ4pa7vHrLd4L/tDp Qt5fMiRvfum3AcARqbiAmVJZi41W2x59kpg2/Qm62en+t3xoLu+mun7omW4lcLok A8LRw14khnodihGRsj4mgC3PSdn8PJRWfkxDS8q2h25UTwK35K71gXsRaUkxhoSg SwpJzFKAdh/YPfgNXJZ1I2tZDOTyLwQVSv84pKOj9XFs7mhoNAbr3uVNQYotI074 fY1r6/IkjQg0At36UbkU5oOOaVfaBO/eHv+qEhb6P96PoJygHh0= =VNRn -----END PGP SIGNATURE-----