rsync - Debian Package Tracker

general
source: rsync (main)
version: 3.3.0+ds1-4
maintainer: Paul Slootman (DMD)
uploaders: Samuel Henrique [DMD]
arch: any
std-ver: 4.7.0
VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
o-o-stable: 3.1.3-6
oldstable: 3.2.3-4+deb11u1
old-sec: 3.2.3-4+deb11u3
old-bpo: 3.2.7-1~bpo11+1
stable: 3.2.7-1
stable-sec: 3.2.7-1+deb12u2
stable-p-u: 3.2.7-1+deb12u2
testing: 3.3.0+ds1-4
unstable: 3.3.0+ds1-4
versioned links
3.1.3-6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.3-4+deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.3-4+deb11u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.7-1~bpo11+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.7-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.2.7-1+deb12u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.3.0+ds1-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
rsync (85 bugs: 1, 38, 46, 0)
action needed
A new upstream version is available: 3.4.1 high
A new upstream version 3.4.1 is available, you should consider packaging it.
Created: 2025-01-15 Last update: 2025-02-23 22:00
3 bugs tagged patch in the BTS normal
The BTS contains patches fixing 3 bugs, consider including or untagging them.
Created: 2025-01-06 Last update: 2025-02-23 21:31
Does not build reproducibly during testing normal
A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!
Created: 2025-01-17 Last update: 2025-02-23 20:03
2 new commits since last upload, is it time to release? normal
vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:
commit 9119d51e217beb3b63a03c402a29405f64c9672e
Author: Samuel Henrique <samueloph@debian.org>
Date:   Mon Jan 20 22:48:31 2025 +0000

    Undo merges that were supposed to be for debian/bookworm

commit 32714ffe9518ac877941ae3741b9b50e6bc087e6
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Jan 19 20:02:01 2025 +0000

    Swap Maintainer with Uploaders, so samueloph can get email notifications

commit 4300121099e54cd6f7e929f87bfdd7688f09698f
Author: Thorsten Alteholz <debian@alteholz.de>
Date:   Fri Jan 17 22:03:02 2025 +0100

    Import Debian changes 3.2.3-4+deb11u3
    
    rsync (3.2.3-4+deb11u3) bullseye-security; urgency=high
    .
      * Non-maintainer upload by the LTS Team.
      * fix for upstream regression of CVE-2024-12087
        FLAG_GOT_DIR_FLIST collission with FLAG_HLINKED
      * fix use-after-free in generator

commit e9f568b427d475a1c0e9861dca5739a820a84b3c
Author: Thorsten Alteholz <debian@alteholz.de>
Date:   Sun Jan 12 19:03:02 2025 +0100

    Import Debian changes 3.2.3-4+deb11u2
    
    rsync (3.2.3-4+deb11u2) bullseye-security; urgency=high
    .
      * Non-maintainer upload by the LTS Team.
      * CVE-2024-12085
        prevent information leak off the stack
      * CVE-2024-12086
        - refuse fuzzy options when fuzzy not selected
        - added secure_relative_open()
        - receiver: use secure_relative_open() for basis file
        - disallow ../ elements in relpath for secure_relative_open
      * CVE-2024-12087
        - Refuse a duplicate dirlist.
        - range check dir_ndx before use
      * CVE-2024-12088
        make --safe-links stricter
      * CVE-2024-12747
        fixed symlink race condition in sender
    .
    rsync (3.2.3-4+deb11u1) bullseye; urgency=medium
    .
      * debian/patches:
        - copy-devices: Re-add upstream patch for --copy-devices, the
          --write-device option is not fully equivalent (closes: #992215).
        - fix_delay_updates: New patch from upstream to fix regression
          in option --delay-updates (closes: #992231).
        - fix_mkpath.patch: New upstream patch to fix an edge case on --mkpath.
        - fix_rsync-ssl_RSYNC_SSL_CERT_feature: New upstream patch to fix an edge
          case on rsync-ssl.
        - fix_sparse_inplace: New upstream patch to fix --sparse + --inplace
          options.
        - manpage_upstream_fixes: Import multiple upstream patches to fix
          manpage.
        - update_rrsync_options: New upstream patch to update rrsync options.
      * d/rsync.docs: Add NEWS.md file (previously named NEWS) (closes: #993697).
    .
    rsync (3.2.3-4) unstable; urgency=medium
    .
      [ Helmut Grohne ]
      * d/p/fix_ftcbfs_configure.patch: New patch to fix FTCBFS (closes: #971285)
    .
      [ Samuel Henrique ]
      * Bump Standards-Version to 4.5.1
    .
    rsync (3.2.3-3) unstable; urgency=high
    .
      * d/p/CVE-2020-14387.patch: New patch to fix an openssl related CVE
        (closes: #969530, CVE-2020-14387)
    .
    rsync (3.2.3-2) unstable; urgency=medium
    .
      [ Sergio Durigan Junior ]
      * Make the autopkgtests cross-friendly.
        Thanks to Steve Langasek <steve.langasek@ubuntu.com>
    .
    rsync (3.2.3-1) unstable; urgency=medium
    .
      * New upstream version 3.2.3
      * debian/patches:
        - time-limit.diff: Remove patch, applied upstream now
        - disable_reconfigure_req.diff: Refresh patch and dep3 headers
        - perl_shebang.patch: Update patch
        - fix_bwlimit_0.patch: Remove patch, applied upstream
    .
    rsync (3.2.2-2) unstable; urgency=medium
    .
      * d/p/fix_bwlimit_0.patch: New upstream patch to fix bwlimit=0
        (closes: #964587)
    .
    rsync (3.2.2-1) unstable; urgency=medium
    .
      * New upstream version 3.2.2
      * d/rsync.install: Install rsync-no-vanished (closes: #353697)
    .
    rsync (3.2.1-1) unstable; urgency=medium
    .
      * New upstream version 3.2.1
      * Remove patches applied upstream:
        - backup-dir-implies-backup.diff
        - manpage-compress-level.diff
        - systemd-unit.diff
      * d/patches:
        - logdir.diff: Remove patch since logdir which comes with file is the
          default one
        - time-limit.diff: Update patch from upstream
      * d/u/signing-key.asc: Fix signing key
    .
    rsync (3.2.0-1) unstable; urgency=low
    .
      * New upstream version 3.2.0
      * Bump DH to 13
      * Bump Standards Version to 4.5.0
      * Stop using bundled zlib in favor of dynamic linking to zlib1g-dev
      * Install manpages from build directory instead of sources
      * d/control:
        - Add Suggests on python3 for the script git-set-file-times under /usr/share
        - Remove unneeded build-dependency libattr1-dev (closes: #953927)
        - Update Build-Deps, remove yodl and add new libs
      * d/copyright: Update file to add the new openssl exemption to the gpl3
        license
      * d/u/metadata: Add Bug-Submit and Bug-Database fields
      * d/upstream/signining-key: Change format from pgp to armored .asc
      * d/rsync.NEWS: Add information about two parameter name changes
      * d/rsync.manpages: Add new manpage rsync-ssl.1
      * d/s/include-binaries: Remove file now that gpg key is in armored mode in asc
        file
      * d/patches:
        - skip_devices_test.patch: New patch to skip devices test because it
          fails on kfreebsd and hurd
        - perl_shebang.patch: New patch to remove usage of env from perl shebang
        - disable_reconfigure_req.diff: Refresh patch
        - backup-dir-implies-backup.diff: Update patch
        - manpage-compress-level.diff: Update patch
        - systemd-unit.diff: Update patch, only adds list of manpages now
        - time-limit.diff: Update patch from upstream
        - Remove patches applied upstream:
          ~ CVE-2016-9840.patch
          ~ CVE-2016-9841.patch
          ~ CVE-2016-9842.patch
          ~ CVE-2016-9843.patch
          ~ Two-spelling-mistakes-in-rsync.yo.diff
          ~ prealloc-fix.diff
          ~ ssh-6-option.diff
          ~ copy-devices.diff: --copy-devices is now --write-devices
          ~ noatime.diff: --noatime is now --open-noatime
    .
      [ Debian Janitor ]
      * Set upstream metadata fields: Repository.
    .
    rsync (3.1.3-8) unstable; urgency=medium
    .
      * Link rrsync in /usr/bin/
      * Run upstream tests at build time:
        -  d/rules: Stop overriding dh_auto_test
        -  d/p/noatime.diff: Change patch to address test failure
      * Run upstream tests on autopkgtest
      * d/rsync.install: Move scripts to /usr/share/ instead of usr/share/doc/
        (closes: #911321):
        - rsync.NEWS: Create file and tell about scripts new location
      * d/salsa-ci.yml: Skip repro tests for now
      * d/p/noatime.diff:
        - Fix DEP-3 headers
        - Fix typo
    .
    rsync (3.1.3-7) unstable; urgency=low
    .
      * Bump Standards-Version to 4.4.1
      * Add salsa-ci.yml
      * Convert packaging to use debhelper:
        - Automatically build dbgsym package (closes: #920052)
        - Use quilt for patches:
          ~ Refresh all patches
          ~ Remove lintian override for lack of patch series file
          ~ d/rules: Stop applying patches here, use quilt instead
        - Use debhelper instead of maint scripts to deal with .init file
          ~ Create symlink for .service file in debian/ because DH is not
            finding it
        - d/control:
          ~ Add Rules-Requires-Root: no
          ~ Add '${misc:Depends}' Dependency
          ~ Add Pre-Depends '${misc:Pre-Depends}'
          ~ Add debhelper-compat build-dependency
          ~ Remove build-dependency on autotools, not needed with debelpher
        - d/rules:
          ~ Add export DEB_BUILD_MAINT_OPTIONS = hardening=+all
          ~ Use parameter --with-included-zlib=yes on configure
          ~ override_dh_auto_test: don't run make test
        - d/rsync.examples: Create file and install same files as before moving
          to DH
        - d/rsync.install: Create file and install same files as before moving
          to DH
        - d/p/disable_reconfigure_req.diff: Disable reconfigure check at Makefile
      * d/control:
        - Remove dependency lsb-base version requirement, required version was
          released in 2008
        - Remove breaks duplicity, breakable version was superseded in 2011
        - Remove base-files dependency as it is an essential package and version
          required was released in 2007
      * d/rsync.default: Fix name of file
      * d/rsync.lintian-overrides:
        - Fix name of file
        - Remove unused override
    .
    rsync (3.1.3-6) unstable; urgency=medium
    .
      * Apply CVEs from 2016 to the zlib code.
        closes:#924509
    .
    rsync (3.1.3-5) unstable; urgency=medium
    .
      * d/rules: fix sorting for reproducible builds, in the previous release
        the -z parameter was used on sort with a newline line terminated input.
    .
    rsync (3.1.3-4) unstable; urgency=medium
    .
      * d/rules: sort files when using find, now rsync is fully
        reproducible, thanks to Dhole <dhole@openmailbox.org> for
        the first patch (closes: #787123)
    .
    rsync (3.1.3-3) unstable; urgency=medium
    .
      [ Samuel Henrique ]
      * move source lintian overrides to d/source/lintian-overrides
      * d/lintian.overrides: add override for false positive spell
        check 'allow to'
      * d/rules: sort files before doing md5sum, one step closer to
        a reproducible build
      * d/postinst:
        - remove variable not used anymore
        - remove checking for release onlder than oldoldstable
      * d/upstream/signing-key.pgp: export same key but without sigs
        and clean & minimal
    .
      [ Chris Lamb ]
      * d/init.d: [stop] ensure the process has stopped before returning
        (closes: #829193)
    .
    rsync (3.1.3-2) unstable; urgency=medium
    .
      * Fix --prealloc to keep file-size 0 when possible, from upstream.
        closes:#919539
      * Updated systemd unit file to start after network.target.
        closes:#852080
      * Don't compress the files shipped in /usr/share/doc/rsync/scripts/
        closes:#911321
    .
    rsync (3.1.3-1) unstable; urgency=medium
    .
      * New upstream version 3.1.3 (closes: #906895)
      * Bump Standards-Version to 4.3.0
      * Bump watch to v4
      * Add myself as Uploader
      * Update Vcs-* fields to salsa
      * d/control|copyright: use https
      * d/patches: remove upstream applied patches
      * d/watch:
        - better regex to prevent download of wrong tarball
        - use https
        - fix syntax of pgpsigurlmangle option
      * wrap-and-sort -a
      * Added Documentation tag to systemd unit file. (PS)
      * Added yodl to build-depends since the manpage is patched during the build.
        (PS)
    .
    rsync (3.1.2-2.2) unstable; urgency=medium
    .
      * Non-maintainer upload.
      * Ignore --protect-args when already sent by client
        (CVE-2018-5764) (Closes: #887588)
    .
      [Helmut Grohne]
      * Fix Architecture field of cross built packages. (Closes: #866353)
    .
      [Aurelien Jarno]
      * Update config.guess for new ports: mips*r6* and riscv64.
        (Closes: #892968, #883048)
    .
    rsync (3.1.2-2.1) unstable; urgency=medium
    .
      * Non-maintainer upload.
      * Enforce trailing \0 when receiving xattr name values (CVE-2017-16548)
        (Closes: #880954)
      * Check fname in recv_files sooner (CVE-2017-17433) (Closes: #883667)
      * Sanitize xname in read_ndx_and_attrs (CVE-2017-17434) (Closes: #883665)
      * Check daemon filter against fnamecmp in recv_files() (CVE-2017-17434)
        (Closes: #883665)
    .
    rsync (3.1.2-2) unstable; urgency=medium
    .
      * Added patch from upstream git to resolve temporary lines in --progress
        output not being cleared.
        closes:#749165
      * Added patch from upstream git to speed up handling of xattrs.
        closes:#799143
    .
    rsync (3.1.2-1) unstable; urgency=medium
    .
      * new upstream release
      * Bumped Standards-Version to 3.9.8 (no change necessary).
      * added deb-systemd-helper stuff to maintainer scripts to properly support
        systemd.
        closes:#764616
      * Modified the /etc/default/rsync and /usr/share/doc/rsync/README.Debian
        to document how to configure the rsync daemon behaviour when using systemd.
        closes:#786549
      * included copy-devices.diff patch from
        https://rsync.samba.org/ftp/rsync/src/rsync-patches-3.1.2.tar.gz to
        enable the --copy-devices option to copy the data inside a device instead
        of copying the node.
        closes:#509335
      * included time-limit.diff patch from
        https://rsync.samba.org/ftp/rsync/src/rsync-patches-3.1.2.tar.gz to
        enable the -stop-at and --time-limit patches to stop rsync at a certain
        time or after a certain duration.
        closes:#701812
      * Add description of value for --compress-level to manpage.
        closes:#700697
      * Don't use hard-coded path to invoke-rc.d for check in prerm script.
    .
    rsync (3.1.1-3) unstable; urgency=medium
    .
      * Added patch for CVE-2014-9512, Rsync path spoofing attack vulnerability.
        closes:#778333
    .
    rsync (3.1.1-2) unstable; urgency=low
    .
      * hardening flags were not applied correctly, debian/rules modified thanks
        to patch from Simon Ruderich.
        closes:#754412
    .
    rsync (3.1.1-1) unstable; urgency=low
    .
      * new upstream release
        Includes config.* update, closes:#714782
        Includes preallocate patch, closes:#649914
      * Bumped Standards-Version to 3.9.5.0 (no change necessary).
      * revert to using included zlib as there have been numerous reports of failed
        transfers when using -z with the separate zlib.
      * use the now included systemd file instead of our own copy.
      * use hardening=+all flags, thanks to hint from waldeck@gmx.de
      * add noatime patch which adds the --noatime option, which adds the O_NOATIME
        flag when opening files, to no update the access time on kernels that
        support that (linux 2.6.8 and later).
        closes:#738708,#244168
      * changed backtick usage in rules for CFLAGS and LDFLAGS to $(shell ...)
        closes:#699165
      * added autofs to Should-Start: in init.d script.
        closes:#730149
      * added README.Debian file to explain how to get the daemon running.
        closes:#589529
      * simplify init.d nice parameter checking.
        closes:#647145
    .
    rsync (3.1.0-3) unstable; urgency=high
    .
      * fix for CVE-2014-2855 - rsync denial of service
        a remote client can send an invalid username and cause an infinite CPU
        loop on the server child process.
        closes:#744791
      * added upstream signature for uscan usage
      * changed package source format to 3.0 (quilt)
    .
    rsync (3.1.0-2) unstable; urgency=low
    .
      * fix build failure if zlib1g-dev package is not installed;
        solved by building without the included zlib source and adding a
        build-depends on zlib1g-dev >= 1:1.2.8
        closes:32379
    .
    rsync (3.1.0-1) unstable; urgency=low
    .
      * new upstream release.
      * Bumped Standards-Version to 3.9.4.0 (no change necessary).
      * Patches cast--1-size_t.diff, delete-delay.diff, manpages.GPL.diff,
        partial-timestamp.diff, progress-cursor-pos.diff, rsyncd.conf.5.comment.diff
        no longer needed (integrated into upstream source).
    .
    rsync (3.0.9-4) unstable; urgency=low
    .
      * mark rsync package as Multi-Arch: foreign.
        closes:#688940
      * fixed cross-builds, thanks to patches from Colin Watson.
        closes:#693991
      * Fixed some lintian messages:
        - call strip with --remove-section=.comment --remove-section=.note
        - added watch file
        - change conflicts with duplicity << 0.6.11 to breaks
          See changelog for 3.0.9-1 for more detail
        - properly state "GNU General Public License" in the manpages
      * Added some overrides for lintian:
        - init.d-script-does-not-provide-itself
          (historically the daemon is referred to as rsyncd)
        - spelling-error-in-binary usr/bin/rsync dont don't
          "dont compress" is a config option. Adding an apostrophe would
          make things quite complicated!
    .
    rsync (3.0.9-3) unstable; urgency=low
    .
      * enabled hardening build flags.
        closes:#652248
      * set mtime of partially transferred file to 0 (1 Jan 1970) to solve problem
        of file being skipped when rerun with --partial --update
        closes:#624826
    .
    rsync (3.0.9-2) unstable; urgency=low
    .
      * Enhance comment about pid file line in sample rsyncd.conf.
        closes:#547922
    .
    rsync (3.0.9-1) unstable; urgency=low
    .
      * new upstream release.
      * Bumped Standards-Version to 3.9.2.0 (no change necessary).
      * manpage no longer shows erroneous default for --delete-before.
        (upstream fix)
        closes:#640869,#587567
      * manpage now mentions that --files-from sorts the filenames.
        (upstream fix)
        closes:#536755
      * init.d script checks nice value correctly now.
        closes:#586707
      * fixed typo in comment in sample script rrsync.
        closes:#635603
      * Updated package description and included homepage line.
        closes:#614098
      * Correct error message when using --delete-delay when dying in certain cases.
        See also #587567
        closes:#586551
      * included rsync.service file for systemd, supplied by Michael Stapelberg.
        closes:#639632
      * conflict with duplicity < 0.6.11 as that tries to use rsync:// in
        combination with ::module syntax, which is not allowed (but used to be
        accepted in older rsync versions).
        closes:#605731
    .
    rsync (3.0.9~pre2-2) experimental; urgency=low
    .
      * updated lintian override. This is a modified version optimized for the
        rsync protocol. I.e. the standard zlib version will not work as well.
      * included rsync.service file supplied by Michael Stapelberg,
        see bug#639632
    .
    rsync (3.0.9~pre2-1) experimental; urgency=low
    .
      * new upstream prerelease.
    .
    rsync (3.0.8-1) unstable; urgency=low
    .
      * new upstream release.
      * Bumped Standards-Version to 3.9.1.0 (no change necessary).
    .
    rsync (3.0.7-2) unstable; urgency=low
    .
      * Remove symlink for stop script in rc1.d/ as S01killprocs should take care
        of this. Lintian override also no longer necessary.
        closes:#563864
      * init script doesn't exit with fail if /etc/rsyncd.conf doesn't exist.
        closes:#515769
      * Bumped Standards-Version to 3.8.4 (no chenge necessary).
    .
    rsync (3.0.7-1) unstable; urgency=low
    .
      * new upstream release.
      * Use $DAEMON consistently in the init.d script. Also use RSYNC_PID_FILE and
        RSYNC_DEFAULTS_FILE while we're at it.
        closes:#558771
      * Remove stop links, they serve no useful purpose. Also start it a bit later
        so that startup seems faster. (However, dependency-based boot sequencing
        may interfere with this.) Lintian override was necessary for omitting the
        stop scripts in 0 and 6.
        closes:#534577
      * Add support for running rsync under ionice, via an entry in
        /etc/default/rsync .
        closes:#553458
      * The --delete option displays a better message now when used without -d.
        closes:#544719
    .
    rsync (3.0.6-1) unstable; urgency=low
    .
      * new upstream release.
      * Manpage now states that MD5 is used for protocol version 30 and higher.
        closes:#520330
      * Updated to standards version 3.8.2. Added debian/README.source .
      * Added lintian override for embedded-zlib, as this is a modified version
        optimized for the rsync protocol. I.e. the standard zlib version will not
        work as well.
      * Added a 'status' option to the init.d script.
        closes:#492138
      * Manpage now declares --delete-during to be the default in the summary.
        closes:#472767,#476368
    .
    rsync (3.0.5-1) unstable; urgency=low
    .
      * new upstream release.
      * From the upstream NEWS file:
         Fixed a bug when using --sparse on a sparse file that has over 2GB of
         consecutive sparse data.
        closes:#512635
    .
    rsync (3.0.4-3) unstable; urgency=low
    .
      * When transferring files from an older rsync daemon without any options,
        the daemon complained about "unknown option: -". Fixed that with a
        patch from Matt McCutchen.
        closes:#493559
      * Sometimes rsync crashed with a segfault when transferring files with -X
        (preserve extended attributes). Fixed that with a patch from upstream
        (Wayne Davison).
        closes:#498083
    .
    rsync (3.0.4-2) unstable; urgency=low
    .
      * The log format '%P' patch accidentally reverted an ability to transform a
        relative module path into an absolute one when chroot was not enabled.
    .
    rsync (3.0.4-1) unstable; urgency=low
    .
      * new upstream release.
      * Fix log format '%P' when a module is chrooted.
        closes:#493539
      * Add a comment to the rsyncd.conf manpage that a hash sign (for comments)
        can only be used at the beginning of a line.
        closes:#498332
    .
    rsync (3.0.3-2) unstable; urgency=low
    .
      * Included some patches from the upcoming 3.0.4 release, which I consider
        important enough to include now. See debian/patches/README for the
        details.
      * Ensure that the build bails out if patching fails.
      * Added md5sums for this package.
        closes:#484343
      * Updated to standards version 3.7.3. No changes necessary.
    .
    rsync (3.0.3-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (3.0.2-2) unstable; urgency=low
    .
      * Fixed a crash if a non-incremental-recursion transfer has a skipped file
        in a set of hard-links.
        closes:#477931
    .
    rsync (3.0.2-1) unstable; urgency=high
    .
      * new upstream release
      * fixes security problem: potential buffer overflow in the
        extended attribute support. For more info, see
        http://rsync.samba.org/security.html
    .
    rsync (3.0.1-1) unstable; urgency=low
    .
      * new upstream release
      * call ssh with -6 option if rsync was called with -6 option,
        and ditto for -4 option.
        Upstream considers the -4 and -6 options for use only when talking to a
        daemon, hence this change will remain a Debian-only feature.
        closes:367319
    .
    rsync (3.0.1~pre3-1) experimental; urgency=low
    .
      * prerelease version
    .
    rsync (3.0.0-3) unstable; urgency=low
    .
      * unreleased
      * call ssh with -6 option if rsync was called with -6 option,
        and ditto for -4 option.
        closes:367319
    .
    rsync (3.0.0-2) unstable; urgency=low
    .
      * patch from upstream to fix crash in single-use daemon mode.
        see #469172, although this only fixes the secondary part of that report.
    .
    rsync (3.0.0-1) unstable; urgency=low
    .
      * new upstream release
      * manpage typo fixed upstream.
        closes:#414636
      * fixed LSB header in init.d script.
        closes:#458442
      * the progress display will not show negative values, if the file changes
        (becomes shorter) during the transfer.
        closes:#415648
      * manpage now correctly show the short form of copy-dirlinks as -k, not -K
        closes:#418923
      * invalid free() pointer doesn't occur anymore.
        closes:#451558
      * rsync will now write in log when --exclude-from is stdin.
        closes:#466950
      * check for rsyncd.conf in init.d script when starting or restarting.
        closes:#412448
      * include scripts from upstream support directory in
        /usr/share/doc/rsync/scripts/
        closes:#458200
      * include example logrotate config file in /usr/share/doc/rsync/examples/
        closes:#416316
      * filename conversion is now possible with the --iconv option. Noe exactly
        what was asked, but close enough IMHO to close:#320223
    .
    rsync (3.0.0~pre10-1) experimental; urgency=low
    .
      * OK, one more prerelease version
      * fixed LSB header in init.d script.
        closes:#458442
      * manpage typo fixed.
        closes:#414636
    .
    rsync (3.0.0~pre9-1) experimental; urgency=low
    .
      * prerelease version 9 of 3.0.0, hopefully the last before official 3.0.0
      * Updated fsf.org link to GPL-3 text in copyright file.
    .
    rsync (3.0.0~pre8-2) experimental; urgency=low
    .
      * fix hardlinking 64-bit inodes
    .
    rsync (3.0.0~pre8-1) experimental; urgency=low
    .
      * prerelease version 8 of 3.0.0
    .
    rsync (3.0.0~pre7-1) experimental; urgency=low
    .
      * prerelease version 7 of 3.0.0
      * includes fix for the recent CVE-2007-6199, CVE-2007-6200 vulnerabilities
      * modified the way supplemental patches from debian/patches/ are applied
        (accept both .patch and .diff extensions)
    .
    rsync (3.0.0~pre6-1) experimental; urgency=low
    .
      * prerelease version 6 of 3.0.0
    .
    rsync (3.0.0~pre5-1) experimental; urgency=low
    .
      * prerelease version 5 of 3.0.0
    .
    rsync (3.0.0~pre4-1) experimental; urgency=low
    .
      * prerelease version 4 of 3.0.0
    .
    rsync (3.0.0~pre1-1) experimental; urgency=low
    .
      * prerelease version 1 of 3.0.0
    .
    rsync (2.6.9-5) unstable; urgency=high
    .
      * fix two off-by-one errors leading to potential buffer overflow which may
        corrupt the stack (CVE-2007-4091)
        closes:#438125
    .
    rsync (2.6.9-4) unstable; urgency=low
    .
      * Check for empty filename (buggy kernel may have that in /sys)
      * include README.Debian in the package...
      * init.d script checks whether rsync stays running, or whether it was
        running during a restart.
        closes:#412448
      * fixed typos in manpage
        closes:414636
    .
    rsync (2.6.9-3) unstable; urgency=low
    .
      * Add patch from upstream to fix error when using -vv together with --stats.
        closes:#402381
      * treat errno == ENOSYS the same as errno == ENOTSUP on hppa as far as ACL
        support is concerned.
        closes:#401189
    .
    rsync (2.6.9-2) unstable; urgency=low
    .
      * Applied patch from upstream to fix problem
        with --acl together with --delete
        (see http://lists.samba.org/archiv:ee/rsync/2006-November/016706.html)
      * Couple of adjustments to manpage formatting.
    .
    rsync (2.6.9-1) unstable; urgency=low
    .
      * New upstream release.
      * (from experimental version 2.6.9~pre3-1)
        Applied a mix of the patches from Martin Pitt and David Härdeman for
        LSBfying init script.
        closes:#375985,#385877
      * Upstream now includes the patch for replacing a dir with a symlink when
        using --delete-after.
        closes:#350522
      * Now includes the ACL patch.
    .
    rsync (2.6.9~pre3-1) experimental; urgency=low
    .
      * 2.6.9-pre3
      * Applied a mix of the patches from Martin Pitt and David Härdeman for
        LSBfying init script.
        closes:#375985,#385877
      * Updated policy version from 3.6.2 to 3.7.2; no changes needed
      * Applied ACL patch. Please test :-)
    .
    rsync (2.6.9~pre1-1) experimental; urgency=low
    .
      * 1st prerelease of rsync-2.6.9
    .
    rsync (2.6.8-2) unstable; urgency=low
    .
      * Ignore empty value for RSYNC_NICE.
        closes:#365261
    .
    rsync (2.6.8-1) unstable; urgency=low
    .
      * new upstream version
      * Updated standards version to 3.6.2 (no changes necessary).
      * (from experimental version 2.6.7-2.6.8pre1):
        Split ssh suggestion into openssh-server and openssh-client.
        Also added blurb about supplying daemon functionality in the description.
        closes:#356994
      * (from experimental version 2.6.7-2.6.8pre1):
        Added support for running rsyncd at a nice value via the defaults file.
        closes:#354306
    .
    rsync (2.6.7-2.6.8pre1) experimental; urgency=low
    .
      * new upstream version (prerelease 2.6.8pre1).
      * Split ssh suggestion into openssh-server and openssh-client
        as suggested in #356994 (not closing yet). Also added blurb
        about supplying daemon functionality in the description.
      * Added support for running rsyncd at a nice value via the defaults file,
        as suggested in #354306 (not closing yet).
    .
    rsync (2.6.7-1) unstable; urgency=low
    .
      * new upstream version.
        closes:#357314
      * Includes a patch for an exclude bug when dealing with --relative
        while copying an absolute path. This bug will lead to 2.6.8 being released
        within the next couple of weeks, but this way 2.6.7 can get some Debian
        exposure before then.
      * Removed mention of ssh being a suitable replacement for rsh.
        closes:#324200
      * Fixed "!" in ~/.cvsignore.
        closes:#314473
    .
    rsync (2.6.6-1) unstable; urgency=low
    .
      * new upstream version.
        bug-fix release to handle a null-pointer bug that turned up in rsync's
        version of zlib 1.1.4 (this is not the recent zlib 1.2.2 security fix,
        which did not affect rsync) and to squash a few other minor bugs.  To deal
        with the zlib issue, rsync has been upgraded to include zlib 1.2.3.
      * Now use the --min-size patch as included by upstream, instead of the
        (minimally different) Debian patch.
      * Fixed some minor typos in the manpage.
        closes:#309100
      * Clarified text about pidfile in sample rsyncd.conf.
        closes:#319335
    .
    rsync (2.6.5-1) unstable; urgency=low
    .
      * new upstream version.
        Contains the patches previously applied in 2.6.4-3 from CVS.
      * Now should handle locale-specific characters better in logging output
        (i.e. the correct chars should be displayed, not '?').
    .
    rsync (2.6.4-6) unstable; urgency=high
    .
      * Fixed grave bug:
        replaced the Debian-specific patch to log.c with the upstream CVS version,
        as upstream changes conflict with the Debian patch, causing syslog logging
        (the default!) to fail, meaning that for most people the rsync as daemon
        doesn't work.
        This includes people using systemimager-server, as that generates the
        rsyncd.conf on the fly without a log file line, hence the rsync bug
        causes a total failure of that package.
        closes:#307923,#308428
      * fixed the rsync.1 manpage, where cut&paste from a diff was not done
        correctly (the leading '+'s were still there).
    .
    rsync (2.6.4-5) unstable; urgency=high
    .
      * Fixed not backupping deleted files when --backup is used in combination
        with --delete-after (this was considered a critical bug).
        closes:#306981
      * Removed spurious log.c.DEBIAN file from source (diff, actually).
      * Removed old rsyncstats script from diff.
      * Install rsyncstats script to /usr/sbin/.
      * Fixed some typos in the man page.
        closes:#305627
      * Implemented a --min-size option.
        closes#:27126
    .
    rsync (2.6.4-4) unstable; urgency=low
    .
      * Fix from upstream for incompatibility with older rsync versions when using
        --exclude (and not --delete).
        closes:#306368
    .
    rsync (2.6.4-3) unstable; urgency=low
    .
      * Added comment to /etc/default/rsync that the rsyncd.conf specified there
        is not used when accessing the daemon via a remote shell.
        closes:#298002
      * Correctly report whether what we're not creating is a file or a directory.
        closes:#142258
      * Concat the upstream NEWS & OLDNEWS together as changelog instead of as-is.
        closes:#306250
      * assorted recommended patches from upstream, collected in debian/patches/
        in the source package:
        - fix for sending a single file with -H
        - improper handling of --one-file-system in some cases
        - --link-dest / --hard-links problem
        - new hard-links in not-yet-created directories
    .
    rsync (2.6.4-2) unstable; urgency=low
    .
      (voor 2.6.5 close 266373)
      * Fixed problem with rsyncd when use chroot = no and module path = /
        closes:#303900
      * Added comment to example rsyncd.conf to make it clear that read only is
        the default.
        closes:#290905,#290882
    .
    rsync (2.6.4-1) unstable; urgency=low
    .
      * New upstream version.
      * --bwlimit-mod is now removed.
    .
    rsync (2.6.3-2) unstable; urgency=low
    .
      * Now supports alternate location for rsync daemon config file through
        /etc/default/rsync .
        closes:#271713,#282092
      * If the daemon isn't set to be started, only give a message is there is an
        rsyncd.conf file.
        closes:#252441
      * RSYNC_ENABLE may now also be set to "inetd" for those who want to start
        rsyncd from inetd; all this does is prevent the init.d script from
        outputting a message. You still need to add rsyncd to inetd's config
        yourself.
      * Fixed a few unescaped hyphens in the manpage, thanks to Joseph Nahmias for
        finding them.
        closes:#279586
      * Removed a double line from the man page left behind while editing.
        closes:#282148
      * Patch for --bwlimit when used in daemon mode, which enables the behaviour
        that rsync had previous to 2.6.3 i.e. specifying a default bwlimit (_not_
        a maximum!).
        closes:#281519
    .
    rsync (2.6.3-1) unstable; urgency=low
    .
      * New upstream version.
      * --bwlimit-mod is now deprecated, as the standard --bwlimit implementation
        now uses ideas from --bwlimit-mod and should always work satisfactorily.
        closes 181336
      * Corrected example rsyncd.conf
        closes 256938
    .
    rsync (2.6.2.pre3.2-1) experimental; urgency=low
    .
      * Second preliminary version of what is to be 2.6.3.
    .
    rsync (2.6.2.pre3.1-1) experimental; urgency=low
    .
      * preliminary version of what is to be 2.6.3.
      * --bwlimit-mod is now deprecated, as the standard --bwlimit implementation
        now uses ideas from --bwlimit-mod and should always work satisfactorily.
        closes 181336
      * Corrected example rsyncd.conf
        closes 256938
    .
    rsync (2.6.2-3) unstable; urgency=high
    .
      * security: directory traversal in daemon mode fix
        (advisory CAN-2004-0792)
        closes:#265662
    .
    rsync (2.6.2-2) unstable; urgency=low
    .
      * Build with -g by default.
        closes:#239906
      * Check value of RSYNC_ENABLE as set in the defaults file, that it's
        either 'true' or 'false'.
        closes:#256791
      * If set to start the daemon, print an error if the rsyncd.conf file
        doesn't exist.
        closes:#238222
      * Added description of --bwlimit-mod to rsync manpage.
        closes:#245579
    .
    rsync (2.6.2-1) unstable; urgency=medium
    .
      * New upstream version.
        - fixes bug with --relative option in 2.6.1 that can cause files to be
        transferred incorrectly.
      * Additional patch to fix possible segmentation violation with --delete
        option.
    .
    rsync (2.6.1-1) unstable; urgency=high
    .
      * New upstream version.
    .
    rsync (2.6.0-3) unstable; urgency=low
    .
      * Fix for .cvsignore in one dir affecting other dirs.
        closes#239791
    .
    rsync (2.6.0-2) unstable; urgency=low
    .
      * Fixed building on GNU/KNetBSD (by adding DEB_BUILD_GNU_TYPE and
        DEB_HOST_GNU_TYPE settings after backwards compatibilty stuff in rules).
        closes:#223267
      * Experimental modification of --bwlimit option to limit the size of writes
        when using small bwlimit values. Use --bwlimit-mod instead of --bwlimit.
        Note that this needs an rsync version at both ends that has this
        modification. See bug 191557 for more info.
      * Removed own kludge to fix #146045 (interrupting while ssh is asking for a
        password leaves tty in non-echoing state) as upstream rsync now has its
        own kludge for this in another place.
      * Added init.d script for those who want to start rsync in daemon mode
        automatically. You'll need to edit /etc/default/rsync and create an
        appropriate rsyncd.conf file to actually get it to start.
        closes:#211007
    .
    rsync (2.6.0-1) unstable; urgency=low
    .
      * New Year's Day official release of 2.6.0.
      * In short, the most important points from NEWS:
      * - ssh is now the default remote shell for rsync.
      * - Added --files-from, --no-relative, --no-implied-dirs, and --from0.
      * - Fixed several exclude/include matching bugs when using wild-cards.
          Please check the NEWS file for details on subtle changes in
          exclude/include matching.
      * - Make --link-dest honor the absence of -p, -o, and -g.
      * - Fixed file I/O error detection.
      * - Improved file-related error messages to better indicate exactly what
          pathname failed.
      * - Fixed bug that prevented regular files from replacing special files and
          caused a directory in --link-dest or --compare-dest to block the creation
          of a file with the same path.  A directory still cannot be replaced by a
          regular file unless --delete specified.  (J.W. Schultz)
    .
    rsync (2.5.99pre2-1) unstable; urgency=low
    .
      * Test release of version 2.6.0pre2
        Final version of rsync 2.6.0 is scheduled for January 1st.
    .
    rsync (2.5.99pre1-1) experimental; urgency=low
    .
      * Test release of version 2.6.0pre1
      * manpage hasn't all the proper patches, for the rest it should be like the
        final version as far as Debian is concerned.
    .
    rsync (2.5.7-1) unstable; urgency=high
    .
      * New upstream version
      * Fixes heap overflow vulnerability when run as a server.
    .
    rsync (2.5.6-2) unstable; urgency=low
    .
      * If the specified log file can't be opened, don't segfault trying to write
        to the file pointer; fall back to syslog instead (and log an appropriate
        message there). This was especially irritating when starting it in daemon
        mode.
        closes:#165839
    .
    rsync (2.5.6-1) unstable; urgency=low
    .
      * New maintainer
      * Added a small delay when an interrupt is received so that child processes
        can clean up (i.e. ssh can restore tty settings) before the child
        processes are killed.
        closes:#146045
      * Removed the backslashes before single quotes in the manpage to prevent
        them getting turned into acute accents. Also changed - to \- and
        " to \(lq and \(rq, and ' to \(oq and \(cq where appropriate.
        closes:#152135
      * Moved the /usr/share/doc/rsync/sample.rsyncd.conf to
        /usr/share/doc/examples/rsyncd.conf . Also removed debian/dirs as it
        wasn't being used...
        closes:#193024
      * Added upstream's NEWS, OLDNEWS, and TODO to doc directory. Removed
        debian/docs as it wasn't being used...
        closes:#128708
      * Removed the description for --csum-length from the manpage, as there's no
        such option in the program.
        closes:#122629
      * Removed postinst, all it did was add a link to /usr/doc/
      * Updated the Fix for "mkstemp: filename too long" (#183667)
        to the current upstream CVS version.
    .
    rsync (2.5.6-0.1) unstable; urgency=low
    .
      * NMU
      * New upstream version
        - with updated manpage for rsyncd.conf for the exclude option,
          closes:#172778
      * Updated manpage text for --perms option to clarify its behaviour.
        closes:#181582
      * Fix for "mkstemp: filename too long". closes:#183667
    .
    rsync (2.5.5-0.2) unstable; urgency=medium
    .
      * NMU
      * Be sure to use "nogroup" instead of "nobody" for server group
       (Closes: #144570).
    .
    rsync (2.5.5-0.1) unstable; urgency=high
    .
      * NMU
      * New upstream release.
          - Includes fix for --whole-file option defaulting to on.
            (Closes: #141552)
    .
    rsync (2.5.4-1) unstable; urgency=high
    .
      * New upstream release
      * includes fix for zlib double-free bug (closes: #137958)
      * update copyright to mention Martin Pool as upstream maintainer
    .
    rsync (2.5.2-0.1) unstable; urgency=high
    .
      * NMU
      * new upstream release from 2001-01-26
      * new version fixes security problem (remote exploit)
        (closes: Bug#130924)
      * new version added new option "--ignore-existing"
        (closes: Bug#124286)
      * added debian/docs with NEWS, OLDNEWS, TODO
        (closes: Bug#128708)
      * added Makefile.in changes from 2.5.1-0.1
      * downloaded http://rsync.samba.org/ftp/rsync/cvs.log and added
        it to the package but its not uptodate.:(
      * added "RSYNC=/usr/bin/rsync" to test.sh like previous version
      * changed group in loadparm.c from nobody to nogroup
        like previous version
    .
    rsync (2.5.1-0.1) unstable; urgency=low
    .
      * NMU
      * New upstream version (Closes: #96193).
    .
    rsync (2.5.0-0.3) unstable; urgency=medium
    .
      * NMU
      * debian/rules:
        - Configure for the correct host and target.
      * Backport patch to configure.in and config.h from CVS so we build on
        alpha, ia64, etc.  Yes, this horridly bloats the Debian diff...
    .
    rsync (2.5.0-0.2) unstable; urgency=medium
    .
      * NMU
      * debian/control:
        - Add Build-Depends.
        - Clean up description a bit.
    .
    rsync (2.5.0-0.1) unstable; urgency=medium
    .
      * NMU
      * New upstream release
        (Closes: #83597, #62160, #26775, #31208, #41805, #44710, #121249).
      * debian/rules:
        - Modernize a bit; add stock code from current policy, change to use
          $(INSTALL), etc.
        - Install cvs.log and sample rsyncd.conf in /usr/share/doc/rsync
          (Closes: #71406, #121792)
    .
    rsync (2.4.6-1) unstable; urgency=low
    .
      * New upstream release (closes: #67674)
    .
    rsync (2.4.4-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.4.3-1) unstable; urgency=low
    .
      * New upstream release (closes: #63840)
    .
    rsync (2.4.2-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.4.1-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.3.2-1.2) frozen unstable; urgency=low
    .
      * Apply patch from Jason Gunthorpe, to fix rsync segfaults.  Closes:
        #51705, #54850.
    .
    rsync (2.3.2-1.1) unstable; urgency=low
    .
      * Use rsync zlib again (closes:Bug#50248).
    .
    rsync (2.3.2-1) unstable; urgency=low
    .
      * New upstream release
      * use zlib from zlib1g-dev (closes: 38273)
      * switch to using /usr/share for docs, and add compatibility /usr/doc link
    .
    rsync (2.3.1-2) unstable; urgency=low
    .
      * apply Patrik Rak's fix for directory atribute setting (closes: #36179)
    .
    rsync (2.3.1-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.3.0-1) unstable; urgency=low
    .
      * New upstream release
      * change rsyncd's default group to ``nogroup'' (closes: #25299)
    .
    rsync (2.2.1-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.2.0-2) unstable; urgency=low
    .
      * check if local ssh conections are allowed before using it as part of the
        test script.
    .
    rsync (2.2.0-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.1.1-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.1.0-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.0.19-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.0.18-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.0.16-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.0.14-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.0.13-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.0.12-1) unstable; urgency=high
    .
      * New upstream release
        (fixes bug that could result in loss of data in files stored in deep
        directory trees i.e. with path names of more than 255 characters)
    .
    rsync (2.0.11-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.0.10-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.0.9-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.0.3-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (2.0.0-1) unstable; urgency=low
    .
      * New upstream release
        (this includes the new --daemon code, which needs testing, so consider
         this to be beta software, and use with care)
    .
        The alpha version that I released a couple of days ago,
        is incompatible with this version, and should be discarded.
    .
    rsync (1.7.4-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (1.7.2-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (1.7.1-0bo1) bo-unstable; urgency=low
    .
      * recompiled for libc5
    .
    rsync (1.7.1-1) unstable; urgency=low
    .
      * New upstream release (closes: #16181 #16860)
      * Fixed typo in description (closes: #18948)
      * add /usr/doc/rsync/test.sh
    .
    rsync (1.6.9-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (1.6.8-2) unstable; urgency=low
    .
      * Add upstream patch to fix --suffix option
        (From Andrew Tridgell on the rsync mailing list)
    .
    rsync (1.6.8-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (1.6.7-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (1.6.3-2) unstable; urgency=low
    .
      * recompile with libc6
    .
    rsync (1.6.3-1) unstable; urgency=low
    .
      * New upstream release
    .
    rsync (1.6.2-1) unstable; urgency=low
    .
      * Initial Release

commit f38372b7b37b0b8f8d66faa1e03ee86178937fb8
Author: Samuel Henrique <samueloph@debian.org>
Date:   Wed Jan 15 18:35:12 2025 +0000

    Finalize changelog for 3.3.0+ds1-4 unstable upload

commit 4a712f67cb26c249966ac47cee5e0cef0fc31af5
Author: Samuel Henrique <samueloph@debian.org>
Date:   Wed Jan 15 18:34:40 2025 +0000

    d/p/Fix_use-after-free_in_generator: New patch to fix UAF

commit 34dc3f2f9b4f0af62ce58008daed4bb6fcad7901
Author: Salvatore Bonaccorso <carnil@debian.org>
Date:   Wed Jan 15 15:33:03 2025 +0100

    Fix FLAG_GOT_DIR_FLIST collission with FLAG_HLINKED
    
    Closes: #1093089
    Closes: #1093052

commit 138cc4044d0427990d72bfb2e7f478aaaa993040
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Jan 12 16:19:57 2025 +0000

    Finalize changelog for 3.3.0+ds1-3 unstable upload

commit e89595df2912e7e89bf5237a549a4d972f6117c1
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Jan 12 16:01:08 2025 +0000

    version_update/0003-update-NEWS-for-3.4.0: Update patch context

commit 1aa49e8529035cbeee3aa45f9df5b922b6e5bd8b
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Jan 12 15:59:09 2025 +0000

    version_update/0002-change-version-to-3.4.0: Change previous version from the patch, from '3.3.1dev' to '3.3.0'

commit 34f9760f2105e83d36c5e9e110e824aebcfdd821
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Jan 12 15:57:19 2025 +0000

    CVE-2024-12747/0001-fixed-symlink-race-condition-in-sender: Refresh patch to remove offset

commit 46fdc8eaf2e0aba945e7b29e702ee26b6cb76f7c
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Jan 12 15:40:28 2025 +0000

    Bump changelog

commit bffe5587869abca5c65afd90ba59a55b5b07c7a8
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Jan 12 15:39:50 2025 +0000

    Import upstream patches for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088, CVE-2024-12747
    
     * d/p/rsync-upstream-CVE-patches-v3/CVE-2024-12084
       - 0001-Some-checksum-buffer-fixes.patch
       - 0002-Another-cast-when-multiplying-integers.patch
     * d/p/rsync-upstream-CVE-patches-v3/CVE-2024-12085
       - 0001-prevent-information-leak-off-the-stack.patch
     * d/p/rsync-upstream-CVE-patches-v3/CVE-2024-12086
       - 0001-refuse-fuzzy-options-when-fuzzy-not-selected.patch
       - 0002-added-secure_relative_open.patch
       - 0003-receiver-use-secure_relative_open-for-basis-file.patch
       - 0004-disallow-.-elements-in-relpath-for-secure_relative_o.patch
     * d/p/rsync-upstream-CVE-patches-v3/CVE-2024-12087
       - 0001-Refuse-a-duplicate-dirlist.patch
       - 0002-range-check-dir_ndx-before-use.patch
     * d/p/rsync-upstream-CVE-patches-v3/CVE-2024-12088
       - 0001-make-safe-links-stricter.patch
     * d/p/rsync-upstream-CVE-patches-v3/CVE-2024-12747
       - 0001-fixed-symlink-race-condition-in-sender.patch
     * d/p/rsync-upstream-CVE-patches-v3/version_update
       - 0001-raise-protocol-version-to-32.patch
       - 0002-change-version-to-3.4.0.patch
       - 0003-update-NEWS-for-3.4.0.patch

commit fb4deccd57bfbd8f10bdc139177c32f3f6c58527
Author: Samuel Henrique <samueloph@debian.org>
Date:   Tue Dec 17 18:56:52 2024 +0000

    Finalize changelog for 3.3.0+ds1-2 unstable upload

commit f05c76366dc790a702a695410be6ab5e6565b88a
Author: Samuel Henrique <samueloph@debian.org>
Date:   Tue Dec 17 18:56:06 2024 +0000

    d/p/configure_ac...: New patch to fix IPv6 support (closes: #1090328)

commit 57ff32ca7994c11a6776a53cd94fbb8a01deb669
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Dec 15 17:57:09 2024 +0000

    d/watch: Set repacksuffix to +ds1 to fix salsa CI
    
     This should be reverted once we import a new upstream release.

commit e678e61fe6ea9b74c505707f98e48cf8b20c23b9
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Dec 15 17:29:00 2024 +0000

    Finalize changelog for 3.3.0+ds1-1 unstable upload

commit e349ed7d4b06accb625010dd96cf2b32f4ea7037
Author: Matheus Polkorny <mpolkorny@gmail.com>
Date:   Tue Dec 10 18:06:46 2024 -0300

    Update changelog for 3.3.0+ds1-1 release

commit 537eb6458fd87af6a3ca8328937bf195f56911c3
Author: Matheus Polkorny <mpolkorny@gmail.com>
Date:   Mon Dec 9 19:21:10 2024 -0300

    d/t/upstream-tests: Run d/rules override_dh_auto_configure during setup

commit d58e7dac4be40abda1f96f064b3bcb5a9995285b
Author: Matheus Polkorny <mpolkorny@gmail.com>
Date:   Mon Dec 9 19:12:14 2024 -0300

    d/rules: fix build failure due to missing zlib/dummy.in and popt/dummy.in

commit 8a26bdc3842c0fb055f0e29ca70b85c1005eb61f
Author: Matheus Polkorny <mpolkorny@gmail.com>
Date:   Sat Dec 7 20:53:58 2024 -0300

    d/watch: add +ds suffix to version

commit 67ffa7f6c826e690cf592eea9bb127af345ad54b
Author: Matheus Polkorny <mpolkorny@gmail.com>
Date:   Sat Dec 7 20:53:22 2024 -0300

    d/copyright: Update to comply with 1.0 format and exclude popt/*
    
    The zlib/ and popt/ directories were excluded because they contain
    bundled libraries that are already provided

commit 7f4a2e0f2be7ba2fd3aee8e23e401a95cd2cd3e5
Merge: 3e65ed3 d4d4bfd
Author: Matheus Polkorny <mpolkorny@gmail.com>
Date:   Sat Dec 7 20:51:01 2024 -0300

    Update upstream source from tag 'upstream/3.3.0+ds1'
    
    Update to upstream version '3.3.0+ds1'
    with Debian dir fecf3877664d724c48f27b90173449877706ba19

commit d4d4bfdfcaa5a6a40a152ddb049c85855086a73d
Author: Matheus Polkorny <mpolkorny@gmail.com>
Date:   Sat Dec 7 20:50:55 2024 -0300

    New upstream version 3.3.0+ds1

commit 3e65ed3c9914e96f1e8775376bb31fa0bf6d5b7a
Author: Matheus Polkorny <mpolkorny@gmail.com>
Date:   Sat Dec 7 20:49:39 2024 -0300

    d/gbp.conf: Remove export-dir configuration

commit 7cc587757de07117d20dc93d6c3a0e3eb4548a0a
Author: Samuel Henrique <samueloph@debian.org>
Date:   Wed Apr 24 09:43:04 2024 +0100

    Update changelog for 3.3.0+ds-1

commit ff1e676574e8b7e33a0ff333e4236e8cf5adf2d0
Merge: f165ccb e359625
Author: Samuel Henrique <samueloph@debian.org>
Date:   Thu Apr 18 23:25:14 2024 +0100

    Update upstream source from tag 'upstream/3.3.0+ds'
    
    Update to upstream version '3.3.0+ds'
    with Debian dir 5471c955c2968830dcb03fc8efd0db11485f15ee

commit e359625cf47618501c123f62e9fdd9e9730bf4a8
Author: Samuel Henrique <samueloph@debian.org>
Date:   Thu Apr 18 23:25:08 2024 +0100

    New upstream version 3.3.0+ds

commit f165ccba4b38729d900fd0015b6f353f5964f49b
Author: Samuel Henrique <samueloph@debian.org>
Date:   Fri Apr 12 00:35:30 2024 +0100

    Finalize changelog for 3.3.0-1 unstable upload

commit de8042b403d6f8cd189b0fdb0e32ddb3c2d35d86
Author: Samuel Henrique <samueloph@debian.org>
Date:   Fri Apr 12 00:30:38 2024 +0100

    Bump Standards-Version to 4.7.0

commit bb53f0c4d4d4a05140f757a61e3fb31d1f3dd760
Author: Samuel Henrique <samueloph@debian.org>
Date:   Fri Apr 12 00:26:47 2024 +0100

    d/rsync.lintian-overrides: Update overrides

commit d34d65df54929741711f7720a1aba9b3091f3050
Author: Samuel Henrique <samueloph@debian.org>
Date:   Fri Apr 12 00:21:25 2024 +0100

    d/control: Drop dependency on lsb-base

commit 4cb32a9dce47dc08e377eeb672ec6dd6bd5fab64
Author: Samuel Henrique <samueloph@debian.org>
Date:   Fri Apr 12 00:13:44 2024 +0100

    Update patches

commit 3f1d10134bf7728da27336c85c9794afee1757fc
Author: Samuel Henrique <samueloph@debian.org>
Date:   Fri Apr 12 00:09:46 2024 +0100

    d/patches: Drop merged patches
    
     d/p/avoid_quoting_of_tilde_when_its_a_destination_arg.patch
     d/p/fix_crashes_with_fortified_strlcpy.patch
     d/p/trust_the_sender_on_a_local_transfer.patch

commit 0b77cb695f9d09fb684349c84a70345d876665ea
Author: Samuel Henrique <samueloph@debian.org>
Date:   Fri Apr 12 00:08:23 2024 +0100

    New upstream version 3.3.0

commit 9b94ce38cc5b014afe57333542655189bdb8a99a
Merge: b29f609 d9463d7
Author: Samuel Henrique <samueloph@debian.org>
Date:   Fri Apr 12 00:08:22 2024 +0100

    Update upstream source from tag 'upstream/3.3.0'
    
    Update to upstream version '3.3.0'
    with Debian dir b203a428e1f1073c657f87fb39e16d721d5ef272

commit d9463d78fb1de2c79cdb3bc82b7ac595b385fa77
Author: Samuel Henrique <samueloph@debian.org>
Date:   Fri Apr 12 00:08:16 2024 +0100

    New upstream version 3.3.0

commit b29f609abed2f8a4f1e9a86d5654cf5b98c61a71
Merge: e0a828d 918f40b
Author: Samuel Henrique <samueloph@debian.org>
Date:   Thu Oct 19 23:21:10 2023 +0000

    Merge branch 'debian/master' into 'debian/master'
    
    Package improvements
    
    See merge request debian/rsync!11

commit 918f40b03a03a7730fc99a1ea715a141ea0429fc
Author: Aquila Macedo <aquilamacedo@riseup.net>
Date:   Sun Oct 1 18:58:03 2023 -0300

    Update changelog to 3.2.7-2

commit d3a0eccf989175b096c10b6c42b02b1ee1306a00
Author: Aquila Macedo <aquilamacedo@riseup.net>
Date:   Sun Oct 1 18:19:11 2023 -0300

    d/patches: Add patch to fix crashes with fortified strlcpy()

commit 16c4771e7ebeffc765631952d39b5886bc20c035
Author: Aquila Macedo <aquilamacedo@riseup.net>
Date:   Sun Oct 1 11:52:13 2023 -0300

    d/control: bump Standards-Version to 4.6.2.

commit e0a828d7b7fcdd50d89f83deb4d506937e4c58ab
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Dec 18 14:22:06 2022 +0000

    Finalize changelog for 3.2.7-1 unstable upload

commit 98f1e8b0190d3be66bf2d59d4ae93858f1b0a33c
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Dec 18 14:06:46 2022 +0000

    d/patches: Add the two new patches to d/p/series

commit 6b5242375d8450a88b02fa97ff4db8e9072cded0
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sun Dec 18 14:06:00 2022 +0000

    d/rsync.lintian-overrides: Update findings as per lintian changes

commit 12f038ba15c711ff3aa3de6f7d3694b894ea97f8
Author: Samuel Henrique <samueloph@debian.org>
Date:   Wed Dec 7 21:55:47 2022 +0000

    Add two upstream patches to fix issues post 3.2.7 release

commit 64816e5cd63fa3200a4a5906928711cd99ac101f
Author: Samuel Henrique <samueloph@debian.org>
Date:   Wed Dec 7 21:38:51 2022 +0000

    d/control: Depend on python:native to fix FTCBFS (closes: #1022988)

commit 2635d1fed5053dd438798809776892fac90b0952
Author: Juri Grabowski <debian@jugra.de>
Date:   Tue Nov 15 21:30:08 2022 +0000

    Bump changelog

commit 5902e7cb9ff0181d50ac828a6f45618df46f5d8b
Author: Juri Grabowski <debian@jugra.de>
Date:   Mon Oct 24 20:27:34 2022 +0100

    Remove patches included in new release

commit 8fc7cdc394041828834f15237f12936916fda237
Merge: 4327ec7 4f650b4
Author: Samuel Henrique <samueloph@debian.org>
Date:   Mon Oct 24 20:26:26 2022 +0100

    Update upstream source from tag 'upstream/3.2.7'
    
    Update to upstream version '3.2.7'
    with Debian dir 3bf1b7df831fe52d6c2dbe6334b8a5b62425362a

commit 4f650b4f39658ec84a4f9e4d68b09275723c1f24
Author: Samuel Henrique <samueloph@debian.org>
Date:   Mon Oct 24 20:26:21 2022 +0100

    New upstream version 3.2.7

commit 4327ec78aaa4eb48bfc7741658eefb22c9c1e750
Author: Samuel Henrique <samueloph@debian.org>
Date:   Wed Sep 21 19:06:41 2022 +0100

    Finalize changelog for 3.2.6-4 unstable upload

commit 720da8c68605b1c81da117016a1225d8f3b2d53f
Author: Samuel Henrique <samueloph@debian.org>
Date:   Wed Sep 14 19:26:46 2022 +0100

    Finalize changelog for 3.2.6-3 experimental upload

commit 7b7d4789bb951955353f6a249c0b9cbc60d901fb
Author: Samuel Henrique <samueloph@debian.org>
Date:   Wed Sep 14 19:24:39 2022 +0100

    d/p/fix_relative.patch: Upstream patch to fix exclusion of /. with --relative
    
     As reported on https://github.com/WayneD/rsync/issues/376

commit d8c927837eb71e304b573c846fe943e3d5d46ce5
Author: Samuel Henrique <samueloph@debian.org>
Date:   Wed Sep 14 19:23:19 2022 +0100

    d/p/fix_files_from.patch: Upstream patch to address the files-from issue
    
     Likely related to #1019561 and #1018296
    
     As reported on https://github.com/WayneD/rsync/issues/375

commit dc3e01d60a9cccce8cc6b809aa7eff86f63f6b41
Author: Samuel Henrique <samueloph@debian.org>
Date:   Tue Sep 13 20:58:03 2022 +0100

    Finalize changelog for 3.2.6-2 experimental upload

commit fd4c6038ce1f5fcf4feaea5f356b06895f042888
Author: Samuel Henrique <samueloph@debian.org>
Date:   Tue Sep 13 20:54:05 2022 +0100

    d/p/fix_remote_filter_rules_validation.patch: New upstream patch to try to fix #1019561 and #1018296

commit 9afbf577aad5780f3c11ab72d28fbd5b460a697a
Author: Samuel Henrique <samueloph@debian.org>
Date:   Sat Sep 10 19:52:58 2022 +0100

    New upstream version 3.2.6

commit 0c4fb3a8bcfde181736b812afc4adec398c75424
Author: Samuel Henrique <samueloph@debian.org>
Date:   Tue Aug 16 11:02:23 2022 +0100

    New upstream version 3.2.5

commit 40c5e9fdeb27f93e47ae7deedf2ddc3b65eac62d
Author: Samuel Henrique <samueloph@debian.org>
Date:   Fri Apr 15 23:41:49 2022 +0100

    New upstream version 3.2.4
Created: 2025-01-19 Last update: 2025-02-21 06:30
debian/patches: 18 patches to forward upstream low
Among the 21 debian patches available in version 3.3.0+ds1-4 of the package, we noticed the following issues:
18 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.
Created: 2023-02-26 Last update: 2025-01-16 08:30
Build log checks report 1 warning low
Build log checks report 1 warning
Created: 2024-03-10 Last update: 2024-03-10 05:03
Standards version of the package is outdated. wishlist
The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.1 instead of 4.7.0).
Created: 2025-02-21 Last update: 2025-02-21 04:27
news
[rss feed]
[2025-01-17] Accepted rsync 3.2.3-4+deb11u3 (source) into oldstable-security (Thorsten Alteholz)
[2025-01-17] Accepted rsync 3.2.7-1+deb12u2 (source) into proposed-updates (Debian FTP Masters) (signed by: Samuel Henrique)
[2025-01-17] rsync 3.3.0+ds1-4 MIGRATED to testing (Debian testing watch)
[2025-01-16] Accepted rsync 3.2.7-1+deb12u2 (source) into stable-security (Debian FTP Masters) (signed by: Samuel Henrique)
[2025-01-16] rsync 3.3.0+ds1-3 MIGRATED to testing (Debian testing watch)
[2025-01-15] Accepted rsync 3.3.0+ds1-4 (source) into unstable (Samuel Henrique)
[2025-01-15] Accepted rsync 3.2.7-1+deb12u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2025-01-14] Accepted rsync 3.2.3-4+deb11u2 (source) into oldstable-security (Thorsten Alteholz)
[2025-01-14] Accepted rsync 3.3.0+ds1-3 (source) into unstable (Samuel Henrique)
[2025-01-14] Accepted rsync 3.2.7-1+deb12u1 (source) into stable-security (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2024-12-20] rsync 3.3.0+ds1-2 MIGRATED to testing (Debian testing watch)
[2024-12-17] Accepted rsync 3.3.0+ds1-2 (source) into unstable (Samuel Henrique)
[2024-12-15] Accepted rsync 3.3.0+ds1-1 (source) into unstable (Matheus Polkorny) (signed by: Samuel Henrique)
[2024-05-03] rsync 3.3.0-1 MIGRATED to testing (Debian testing watch)
[2024-04-11] Accepted rsync 3.3.0-1 (source) into unstable (Samuel Henrique)
[2022-12-24] rsync 3.2.7-1 MIGRATED to testing (Debian testing watch)
[2022-12-23] Accepted rsync 3.2.7-1~bpo11+1 (source) into bullseye-backports (Samuel Henrique)
[2022-12-20] Accepted rsync 3.2.7-1 (source) into unstable (Samuel Henrique)
[2022-09-24] rsync 3.2.6-4 MIGRATED to testing (Debian testing watch)
[2022-09-21] Accepted rsync 3.2.6-4 (source) into unstable (Samuel Henrique)
[2022-09-14] Accepted rsync 3.2.6-3 (source) into experimental (Samuel Henrique)
[2022-09-14] rsync 3.2.6-1 MIGRATED to testing (Debian testing watch)
[2022-09-13] Accepted rsync 3.2.6-2 (source) into experimental (Samuel Henrique)
[2022-09-10] Accepted rsync 3.2.6-1 (source) into unstable (Samuel Henrique)
[2022-08-22] Accepted rsync 3.2.4-1~bpo11+1 (source amd64) into bullseye-backports, bullseye-backports (Debian FTP Masters) (signed by: Samuel Henrique)
[2022-08-19] rsync 3.2.5-1 MIGRATED to testing (Debian testing watch)
[2022-08-16] Accepted rsync 3.2.5-1 (source) into unstable (Samuel Henrique)
[2022-04-21] rsync 3.2.4-1 MIGRATED to testing (Debian testing watch)
[2022-04-18] Accepted rsync 3.2.4-1 (source) into unstable (Samuel Henrique)
[2021-11-30] Accepted rsync 3.1.2-1+deb9u3 (source) into oldoldstable (Adrian Bunk)
bugs [bug history graph]
all: 80 88
RC: 1
I&N: 37 40
M&W: 42 47
F&P: 0
patch: 3
links
homepage
lintian
buildd: logs, checks, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debian patches
debci
ubuntu
[Information about Ubuntu for Debian Developers]
version: 3.4.1-0syncable1
17 bugs (1 patch)