From patchwork Tue Jun 9 20:42:05 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Matthias Fischer X-Patchwork-Id: 9919 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4gZgnl2BlZz3wbB for ; Tue, 09 Jun 2026 20:42:19 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [IPv6:2001:678:b28::201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "E8" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4gZgnl1SVbz3w6 for ; Tue, 09 Jun 2026 20:42:19 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4gZgnl0c4Pz2xVX for ; Tue, 09 Jun 2026 20:42:19 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4gZgnh3lc3z2xNM for ; Tue, 09 Jun 2026 20:42:16 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4gZgng2sKDzbc; Tue, 09 Jun 2026 20:42:15 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1781037735; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=PDejSDdWOnkZ7aJ5ATYThl1JAjaQx11c0N6MBK8If9E=; b=AmPg85jMt9CeiXx5qAmKNhM7PIIP6X1JJXomDCaX4z897e7twM2GWHUObazo6RDEjsGzXm H+4oYi1O90NcnjDw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1781037735; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=PDejSDdWOnkZ7aJ5ATYThl1JAjaQx11c0N6MBK8If9E=; b=Gzldg1arwVLik+X+35YYWaEUV/5nlN1A8jB1zYIE09pIp5HWAljqDwZ89ZM5DMOuKWnl3G e3XMOn3rIpzYpQfhhd4eoC3NrVsg0DlPO3BAJeyGtNYkqE5xkHPhZTKyNnDa+M+K1/JuYC ifbnyQ8yC0ImKhQLzOMn3BpDTjlG1kjsfzJfX2iR4cjqZUKICQOap1fNFxZUm1D5oHZvPK Bt0kof2EEISdyQmTrEdW9D4e3+IghWxnmh9BP/1ueFfSlnJNbhuz7ztBZQlTHP/LJQRioM QPRx0Izs3XSxe15yOFwtJTXPvlGieF/I+pCWFQjeM1OS5sGjeCNQpmjqxfo42g== From: Matthias Fischer To: development@lists.ipfire.org Cc: Matthias Fischer Subject: [PATCH] rsync: Update to 3.4.4 Date: Tue, 9 Jun 2026 22:42:05 +0200 Message-ID: <20260609204207.3525442-1-matthias.fischer@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 For details see: https://download.samba.org/pub/rsync/NEWS#3.4.4 "NEWS for rsync 3.4.4 (8 Jun 2026) Changes in this version: This is a conservative point release that backports regression fixes on top of 3.4.3. No new features are included. BUG FIXES: Honour a relative alt-basis directory (e.g. --link-dest=../sibling, --copy-dest, --compare-dest) on a daemon receiver running with use chroot = no. Such a path is re-anchored at the module root but was then rejected by the receiver's secure open; it now works where kernel-enforced confinement is available. See the PORTABILITY note below for the platform limitation. Fixes #915. sender: open a module-root-absolute path for a path = / module so a daemon serving the filesystem root can satisfy absolute request paths again. Fixes #897. flist: accept the missing-args mode-0 entry in recv_file_entry. Fixes #910. receiver: fix a false "failed verification -⁠-⁠ update discarded" when resuming a delta transfer with an absolute --partial-dir. receiver: fix a NULL dereference on the delta discard path. generator: cap the block s2length at the negotiated checksum length. main: fix --mkpath with --dry-run for a file-to-file copy. Fixes #880. daemon: un-backslash escaped option args. Fixes #829. token: drain the matched-block insert deflate. Fixes #951. Fix the "update skips a file of a different type" case and the daemon upload delete stats. alloc: revert "zero all new memory from allocations". Fixes #959. Always clear the stat buffer and validate nanoseconds before use. PORTABILITY / BUILD: The relative alt-basis fix for daemon receivers (#915) relies on kernel "stay below dirfd" path resolution -⁠-⁠ openat2(RESOLVE_BENEATH) on Linux 5.6+, or openat() with O_RESOLVE_BENEATH on FreeBSD 13+ and macOS 15+. On platforms that lack it (Solaris, OpenBSD, NetBSD, Cygwin and older Linux) secure_relative_open() deliberately rejects any path with a .. component, so relative alt-basis directories remain unavailable there -⁠-⁠ function traded for safety, matching the trade-off already documented for the #715 fix. Absolute alt-basis paths are unaffected on every platform. openat2 is now autodetected at configure time (HAVE_OPENAT2): the openat2(RESOLVE_BENEATH) resolver is compiled in only when both and the SYS_openat2 syscall number are present, fixing the build on older kernels/headers. Fixes #924, #905, #900, #904. Fall back to do_mknod() when mknodat() / mkfifoat() are unavailable. Fixes #896. Install generated manpages correctly in an out-of-tree build. DEVELOPER RELATED: Added a CI workflow that builds this stable branch and runs the v34-stable-testsuite regression suite against the built binary, giving regression coverage without importing the full master test suite into the stable branch. Added a check-progs target for fleettest and extended the build workflows to run on *-stable release branches." Signed-off-by: Matthias Fischer --- lfs/rsync | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/rsync b/lfs/rsync index 2787e91a0..8ba4e11a0 100644 --- a/lfs/rsync +++ b/lfs/rsync @@ -26,7 +26,7 @@ include Config SUMMARY = Versatile tool for fast incremental file transfer -VER = 3.4.3 +VER = 3.4.4 THISAPP = rsync-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = rsync -PAK_VER = 23 +PAK_VER = 24 DEPS = libxxhash @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0bafded6a76a2cedcc6b1f37610c785fa05e62955a43ecb85b8522183a902be3b86157eccbf502116177be0efe19f3051d93cdca5e5734f4a3fbc8bca9878a4f +$(DL_FILE)_BLAKE2 = f4eec8d1077e1cc7eec8cd39dcac4643f7608231f5aa6390cb53104efa1602873a333d9e6cba5d1bb2aeff6c3bf9bccd80370a2105a9cc982b49aae9f39f3bde install : $(TARGET)