From nobody Wed Jan 15 15:31:46 2025 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YY92s2vdgz5kGfX; Wed, 15 Jan 2025 15:31:49 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from omta004.cacentral1.a.cloudfilter.net (omta002.cacentral1.a.cloudfilter.net [3.97.99.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4YY92r1Wb4z3nmp; Wed, 15 Jan 2025 15:31:48 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Authentication-Results: mx1.freebsd.org; dkim=none; spf=softfail (mx1.freebsd.org: 3.97.99.33 is neither permitted nor denied by domain of cy.schubert@cschubert.com) smtp.mailfrom=cy.schubert@cschubert.com; dmarc=permerror reason="p tag has invalid value: quarantine rua=mailto:p[ostmaster@cschubert.com" header.from=cschubert.com (policy=permerror) Received: from shw-obgw-4004a.ext.cloudfilter.net ([10.228.9.227]) by cmsmtp with ESMTPS id Y2oGtXXGxyLQGY5MxtaeNF; Wed, 15 Jan 2025 15:31:47 +0000 Received: from slippy.cwsent.com ([70.66.136.217]) by cmsmtp with ESMTPA id Y5MwtTUCuJhBPY5MwtQLId; Wed, 15 Jan 2025 15:31:47 +0000 X-Auth-User: cschuber X-Authority-Analysis: v=2.4 cv=QY3Fvdbv c=1 sm=1 tr=0 ts=6787d4e3 a=h7br+8Ma+Xn9xscxy5znUg==:117 a=h7br+8Ma+Xn9xscxy5znUg==:17 a=IkcTkHD0fZMA:10 a=VdSt8ZQiCzkA:10 a=6I5d2MoRAAAA:8 a=hGzw-44bAAAA:8 a=CjdR9PTYAAAA:8 a=pkQkX7YbAAAA:8 a=EkcXrb_YAAAA:8 a=NEAV23lmAAAA:8 a=VxmjJ2MpAAAA:8 a=YxBL1-UpAAAA:8 a=rd6lSJ72BtSZK3wv9mkA:9 a=3ZKOabzyN94A:10 a=QEXdDO2ut3YA:10 a=HvKuF1_PTVFglORKqfwH:22 a=eOkOE3MIqR7oZcG_Dlw-:22 a=ppkTPFsFav3tYHhJERkV:22 a=LK5xJRSDVpKd5WXXoEvA:22 a=7gXAzLPJhVmCkEl4_tsf:22 a=Ia-lj3WSrqcvXOmTRaiG:22 Received: by slippy.cwsent.com (Postfix, from userid 1000) id 221C01B6; Wed, 15 Jan 2025 07:31:46 -0800 (PST) X-Mailer: exmh version 2.9.0 11/07/2018 with nmh-1.8+dev Reply-to: Cy Schubert From: Cy Schubert X-os: FreeBSD X-Sender: cy@cwsent.com X-URL: http://www.cschubert.com/ To: Rodrigo Osorio , ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-branches@FreeBSD.org Subject: Re: git: 0076d20a9671 - 2025Q1 - net/rsync: update to 3.4.0 In-reply-to: <20250115052757.0111628C@slippy.cwsent.com> References: <202501150008.50F08gFm067796@gitrepo.freebsd.org> <20250115044157.4FB92114@slippy.cwsent.com> <20250115044542.02F9C2F@slippy.cwsent.com> <20250115052757.0111628C@slippy.cwsent.com> Comments: In-reply-to Cy Schubert message dated "Tue, 14 Jan 2025 21:27:56 -0800." List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-all@freebsd.org Sender: owner-dev-commits-ports-all@FreeBSD.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Date: Wed, 15 Jan 2025 07:31:46 -0800 Message-Id: <20250115153146.221C01B6@slippy.cwsent.com> X-CMAE-Envelope: MS4xfIsfMPfGpoTLlHxv0H3/Wqdk+t02RSMI8F27AKPXvbU6p6W7xubsM4ROZeoRSHJMWqi0Cz81eGPbJ9SjSY3gg0X/MvvkC9W6GowZpjuLPPwhQDg3bmMm 3D7tSmCuovk1mX5ZFpHa01vEUP9ZcqoIXbAl8JAs68rSlTbQeXz46OfwxgqmaMQCMfHik5IiTJXfNUgupcpMZk9DAl4C9AyqynYGMk0S5rbKXKufvNppmSZd R6FzSibOH1OpWX2BnAHA3FlodZp8GDSE1NNiZuSsHDgBA+rU1p+hOuV+EhGWQijcnuPXCI+8+RTQbSCbKUonqCo/9eU19y4FuNf66S3meuRh6yj7u6TY++Vb jBCGtfJv X-Spamd-Result: default: False [-3.63 / 15.00]; RBL_SENDERSCORE_REPUT_9(-1.00)[3.97.99.33:from]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.93)[-0.931]; MV_CASE(0.50)[]; MIME_GOOD(-0.10)[text/plain]; RCVD_IN_DNSWL_LOW(-0.10)[3.97.99.33:from]; ARC_NA(0.00)[]; ASN(0.00)[asn:16509, ipnet:3.96.0.0/15, country:US]; TO_DN_SOME(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[]; DMARC_BAD_POLICY(0.00)[cschubert.com : p tag has invalid value: quarantine rua=mailto:p[ostmaster@cschubert.com]; HAS_REPLYTO(0.00)[Cy.Schubert@cschubert.com]; R_SPF_SOFTFAIL(0.00)[~all]; RCPT_COUNT_THREE(0.00)[4]; FROM_EQ_ENVFROM(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MLMMJ_DEST(0.00)[dev-commits-ports-branches@freebsd.org,dev-commits-ports-all@freebsd.org]; RCVD_TLS_LAST(0.00)[]; R_DKIM_NA(0.00)[]; REPLYTO_EQ_FROM(0.00)[] X-Spamd-Bar: --- X-Rspamd-Queue-Id: 4YY92r1Wb4z3nmp In message <20250115052757.0111628C@slippy.cwsent.com>, Cy Schubert writes: > In message <20250115044542.02F9C2F@slippy.cwsent.com>, Cy Schubert writes: > > In message <20250115044157.4FB92114@slippy.cwsent.com>, Cy Schubert writes: > > > In message <202501150008.50F08gFm067796@gitrepo.freebsd.org>, Rodrigo > > > Osorio wr > > > ites: > > > > The branch 2025Q1 has been updated by rodrigo: > > > > > > > > URL: https://cgit.FreeBSD.org/ports/commit/?id=0076d20a96718a28f956cb35 > 89 > > f1 > > > 03 > > > > 6e48a75f04 > > > > > > > > commit 0076d20a96718a28f956cb3589f1036e48a75f04 > > > > Author: Rodrigo Osorio > > > > AuthorDate: 2025-01-14 23:21:25 +0000 > > > > Commit: Rodrigo Osorio > > > > CommitDate: 2025-01-14 23:58:53 +0000 > > > > > > > > net/rsync: update to 3.4.0 > > > > > > > > Full changelog: https://download.samba.org/pub/rsync/NEWS#3.4.0 > > > > > > > > Security: CVE-2024-12084 - Heap Buffer Overflow in Checksum P > ar > > si > > > ng > > > > Security: CVE-2024-12085 - Info Leak via uninitialized Stack > co > > nt > > > en > > > > ts defeats ASLR > > > > Security: CVE-2024-12086 - Server leaks arbitrary client file > s > > > > Security: CVE-2024-12087 - Server can make client write files > o > > ut > > > si > > > > de of destination directory using symbolic links > > > > Security: CVE-2024-12088 - --safe-links Bypass > > > > Security: CVE-2024-12747 -⁠ symlink race condition > > > > > > > > PR: 284064 > > > > Reported by: osa > > > > > > > > (cherry picked from commit 6afdd4c669193f2041216071d5723e474ae041bf > ) > > > > --- > > > > net/rsync/Makefile | 4 ++-- > > > > net/rsync/distinfo | 10 +++++----- > > > > net/rsync/pkg-plist | 2 +- > > > > 3 files changed, 8 insertions(+), 8 deletions(-) > > > > > > > > diff --git a/net/rsync/Makefile b/net/rsync/Makefile > > > > index 4fefdced0380..996d4edd997e 100644 > > > > --- a/net/rsync/Makefile > > > > +++ b/net/rsync/Makefile > > > > @@ -1,5 +1,5 @@ > > > > PORTNAME= rsync > > > > -DISTVERSION= 3.3.0 > > > > +DISTVERSION= 3.4.0 > > > > CATEGORIES= net > > > > MASTER_SITES= https://www.mirrorservice.org/sites/rsync.samba.org/src > > > > / \ > > > > http://rsync.mirror.garr.it/src/ \ > > > > @@ -100,10 +100,10 @@ post-install: > > > > @${MKDIR} ${STAGEDIR}${ETCDIR} > > > > ${INSTALL_DATA} ${FILESDIR}/rsyncd.conf.sample ${STAGEDIR}${ETC > DIR}/ > > > > ${INSTALL_SCRIPT} ${WRKSRC}/support/rrsync ${STAGEDIR}${PREFIX} > /sbin > > > > - ${INSTALL_MAN} ${WRKSRC}/rrsync.1 ${STAGEDIR}${PREFIX}/share/ma > n/man1/ > > > > > > > > post-install-DOCS-on: > > > > @${MKDIR} ${STAGEDIR}${DOCSDIR} > > > > ${INSTALL_DATA} ${PORTDOCS:S,^,${WRKSRC}/,} ${STAGEDIR}${DOCSDI > R} > > > > + ${INSTALL_DATA} ${WRKSRC}/support/rrsync.1.md ${STAGEDIR}${DOCS > DIR} > > > > > > > > .include > > > > diff --git a/net/rsync/distinfo b/net/rsync/distinfo > > > > index 2e28240fb164..afe59a503dff 100644 > > > > --- a/net/rsync/distinfo > > > > +++ b/net/rsync/distinfo > > > > @@ -1,5 +1,5 @@ > > > > -TIMESTAMP = 1712443181 > > > > -SHA256 (rsync-3.3.0.tar.gz) = 7399e9a6708c32d678a72a63219e96f23be0be23 > 36 > > e5 > > > 0f > > > > d1348498d07041df90 > > > > -SIZE (rsync-3.3.0.tar.gz) = 1153969 > > > > -SHA256 (rsync-patches-3.3.0.tar.gz) = 3dd51cd88d25133681106f68622ebedb > f1 > > 91 > > > ab > > > > 25a21ea336ba409136591864b0 > > > > -SIZE (rsync-patches-3.3.0.tar.gz) = 98487 > > > > +TIMESTAMP = 1736887703 > > > > +SHA256 (rsync-3.4.0.tar.gz) = 8e942f95a44226a012fe822faffa6c7fc38c3404 > 7a > > dd > > > 3a > > > > 0c941e9bc8b8b93aa4 > > > > +SIZE (rsync-3.4.0.tar.gz) = 1167983 > > > > +SHA256 (rsync-patches-3.4.0.tar.gz) = 51533dc5b9b4293d3499b673df185c93 > 48 > > 4f > > > 3e > > > > 6fcf2de52f9bf1f07fa3d7cbc1 > > > > +SIZE (rsync-patches-3.4.0.tar.gz) = 103831 > > > > diff --git a/net/rsync/pkg-plist b/net/rsync/pkg-plist > > > > index c0f2998051d5..6614a2d1b5a3 100644 > > > > --- a/net/rsync/pkg-plist > > > > +++ b/net/rsync/pkg-plist > > > > @@ -1,8 +1,8 @@ > > > > bin/rsync > > > > bin/rsync-ssl > > > > sbin/rrsync > > > > -share/man/man1/rrsync.1.gz > > > > share/man/man1/rsync.1.gz > > > > share/man/man1/rsync-ssl.1.gz > > > > share/man/man5/rsyncd.conf.5.gz > > > > +%%PORTDOCS%%%%DOCSDIR%%/rrsync.1.md > > > > @sample %%ETCDIR%%/rsyncd.conf.sample > > > > > > > > > > rsync appears to be broken. > > > > > > slippy# rsync -aHW --delete git-doc cwsys:`pwd` > > > ABORTING due to invalid path from sender: git-doc/website/shared > > > rsync error: requested action not supported (code 4) at flist.c(2693) > > > [generator=3.4.0] > > > slippy# > > > > > > Seems it can't handle symlinks anymore. > > > > > > > > > -- > > > Cheers, > > > Cy Schubert > > > FreeBSD UNIX: Web: https://FreeBSD.org > > > NTP: Web: https://nwtime.org > > > > > > e^(i*pi)+1=0 > > > > > > > > > > > > > Another error: > > > > slippy# rsync -aHW --delete git-src cwsys:`pwd` > > Internal hashtable error: illegal key supplied! > > rsync error: errors with program diagnostics (code 13) at hashtable.c(88) > > [generator=3.4.0] > > slippy# > > It's the -H (preserve hard links) flag that's causing the issue. Without > the -H flag rsync will behave live cp -r, creating a new file for each > symlink rather than linking them. Certainly an issue upstream will need to > resolve. I reported this upstream (https://github.com/RsyncProject/rsync/issues/702). They have a pull request. The bug is related to another. I expect this to be fixed shortly, probably resulting in a new point release. -- Cheers, Cy Schubert FreeBSD UNIX: Web: https://FreeBSD.org NTP: Web: https://nwtime.org e^(i*pi)+1=0