Date: Tue, 16 Aug 2022 16:18:57 GMT From: Rodrigo Osorio <rodrigo@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-branches@FreeBSD.org Subject: git: af0a5e4af6e2 - 2022Q3 - net/rsync: Update to 3.2.5 Message-ID: <202208161618.27GGIvkb047482@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch 2022Q3 has been updated by rodrigo: URL: https://cgit.FreeBSD.org/ports/commit/?id=af0a5e4af6e253bc3f9ca1f5dd3154656bf3525e commit af0a5e4af6e253bc3f9ca1f5dd3154656bf3525e Author: Rodrigo Osorio <rodrigo@FreeBSD.org> AuthorDate: 2022-08-16 15:45:13 +0000 Commit: Rodrigo Osorio <rodrigo@FreeBSD.org> CommitDate: 2022-08-16 16:04:13 +0000 net/rsync: Update to 3.2.5 Major changes: * CVE-2022-29154 Added some file-list safety checking * CVE-2022-37434 Fix in the bundled zlib (buffer overflow issue) * Fix the handling of filenames specified with backslash-quoted wildcards whith the remote-arg-escaping * Fix configure check for signed char that causes bogus checksums * rsync is compiled with an xxhash 0.8 library * New --trust-sender option to bypass the extra file-list safety checking Full changelog: https://github.com/WayneD/rsync/blob/master/NEWS.md PR: 265633 Reported by: rob2g2 <rob2g2-freebsd@bitbert.com> Relnotes: yes Security: CVE-2022-29154 Security: CVE-2022-37434 (cherry picked from commit d7990faa348a894f6d8c4563abcaadc2cebaafc7) --- net/rsync/Makefile | 3 +-- net/rsync/distinfo | 14 +++++++++----- 2 files changed, 10 insertions(+), 7 deletions(-) diff --git a/net/rsync/Makefile b/net/rsync/Makefile index a5a72f8246e9..247729a6bc1c 100644 --- a/net/rsync/Makefile +++ b/net/rsync/Makefile @@ -1,8 +1,7 @@ # Created by: David O'Brien (obrien@cs.ucdavis.edu) PORTNAME= rsync -DISTVERSION= 3.2.4 -PORTREVISION= 2 +DISTVERSION= 3.2.5 CATEGORIES= net MASTER_SITES= https://www.mirrorservice.org/sites/rsync.samba.org/src/ \ http://rsync.mirror.garr.it/src/ \ diff --git a/net/rsync/distinfo b/net/rsync/distinfo index febadd2a8a24..8044044d080f 100644 --- a/net/rsync/distinfo +++ b/net/rsync/distinfo @@ -1,5 +1,9 @@ -TIMESTAMP = 1650365056 -SHA256 (rsync-3.2.4.tar.gz) = 6f761838d08052b0b6579cf7f6737d93e47f01f4da04c5d24d3447b7f2a5fad1 -SIZE (rsync-3.2.4.tar.gz) = 1114853 -SHA256 (rsync-patches-3.2.4.tar.gz) = 70a597590af6c61cf3d05d663429ff9f60ffe24e44f9c73a4cdc69ebdc1322a4 -SIZE (rsync-patches-3.2.4.tar.gz) = 133580 +TIMESTAMP = 1660557599 +SHA256 (rsync-3.2.5.tar.gz) = 2ac4d21635cdf791867bc377c35ca6dda7f50d919a58be45057fd51600c69aba +SIZE (rsync-3.2.5.tar.gz) = 1129957 +SHA256 (rsync-patches-3.2.5.tar.gz) = e7b1fdf1fc0fca68fd254246c2dc04f6ac90241e665dcf9dfc21dccd8270b6bb +SIZE (rsync-patches-3.2.5.tar.gz) = 141521 +SHA256 (rsync-patches-3.2.5.tar.gz) = e7b1fdf1fc0fca68fd254246c2dc04f6ac90241e665dcf9dfc21dccd8270b6bb +SIZE (rsync-patches-3.2.5.tar.gz) = 141521 +SHA256 (rsync-patches-3.2.5.tar.gz) = e7b1fdf1fc0fca68fd254246c2dc04f6ac90241e665dcf9dfc21dccd8270b6bb +SIZE (rsync-patches-3.2.5.tar.gz) = 141521
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202208161618.27GGIvkb047482>