From nobody Wed Jan 15 05:27:56 2025 X-Original-To: dev-commits-ports-branches@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YXvf75b0lz5kxLK; Wed, 15 Jan 2025 05:27:59 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from omta003.cacentral1.a.cloudfilter.net (omta001.cacentral1.a.cloudfilter.net [3.97.99.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4YXvf72W1xz3x65; Wed, 15 Jan 2025 05:27:59 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Authentication-Results: mx1.freebsd.org; none Received: from shw-obgw-4001a.ext.cloudfilter.net ([10.228.9.142]) by cmsmtp with ESMTPS id XqZCtHqRaxv7PXvwct1DG9; Wed, 15 Jan 2025 05:27:58 +0000 Received: from slippy.cwsent.com ([70.66.136.217]) by cmsmtp with ESMTPA id XvwbtIv8D4k0oXvwctxjCv; Wed, 15 Jan 2025 05:27:58 +0000 X-Auth-User: cschuber X-Authority-Analysis: v=2.4 cv=fLKa3oae c=1 sm=1 tr=0 ts=6787475e a=h7br+8Ma+Xn9xscxy5znUg==:117 a=h7br+8Ma+Xn9xscxy5znUg==:17 a=IkcTkHD0fZMA:10 a=VdSt8ZQiCzkA:10 a=6I5d2MoRAAAA:8 a=hGzw-44bAAAA:8 a=CjdR9PTYAAAA:8 a=pkQkX7YbAAAA:8 a=EkcXrb_YAAAA:8 a=VxmjJ2MpAAAA:8 a=YxBL1-UpAAAA:8 a=zN02nEU5fVuP68YaXmMA:9 a=3ZKOabzyN94A:10 a=QEXdDO2ut3YA:10 a=HvKuF1_PTVFglORKqfwH:22 a=eOkOE3MIqR7oZcG_Dlw-:22 a=ppkTPFsFav3tYHhJERkV:22 a=LK5xJRSDVpKd5WXXoEvA:22 a=7gXAzLPJhVmCkEl4_tsf:22 a=Ia-lj3WSrqcvXOmTRaiG:22 Received: by slippy.cwsent.com (Postfix, from userid 1000) id 0111628C; Tue, 14 Jan 2025 21:27:56 -0800 (PST) X-Mailer: exmh version 2.9.0 11/07/2018 with nmh-1.8+dev Reply-to: Cy Schubert From: Cy Schubert X-os: FreeBSD X-Sender: cy@cwsent.com X-URL: http://www.cschubert.com/ To: Cy Schubert cc: Rodrigo Osorio , ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-branches@FreeBSD.org Subject: Re: git: 0076d20a9671 - 2025Q1 - net/rsync: update to 3.4.0 In-reply-to: <20250115044542.02F9C2F@slippy.cwsent.com> References: <202501150008.50F08gFm067796@gitrepo.freebsd.org> <20250115044157.4FB92114@slippy.cwsent.com> <20250115044542.02F9C2F@slippy.cwsent.com> Comments: In-reply-to Cy Schubert message dated "Tue, 14 Jan 2025 20:45:41 -0800." List-Id: Commits to the quarterly branches of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-branches List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-branches@freebsd.org Sender: owner-dev-commits-ports-branches@FreeBSD.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Date: Tue, 14 Jan 2025 21:27:56 -0800 Message-Id: <20250115052757.0111628C@slippy.cwsent.com> X-CMAE-Envelope: MS4xfBYmo4SyJQpz64oWQoi6Z+j8AZETDwh6VndZwOiZPXzYAlG7zdgXzkeXe59lOYtUGhQP3zQjiXeSBht/HNLXRDzpUZWUOhrzEWIQzoon+FLKY3xCwg/W SQHrJX73VXltbr1BJBXo0T1OHU/12VIRA8Zq0FZZGSupdH9HzWPuVb0vV+L58lSgcUJVEQgmbebYkBAE5Oid1IbSs/PxkuHpR2cF7bY/E3pKj7NU7bb90sOb KijLnSxxqiejCJixz3jqFg1RAQaaBDvzzebb/EFPPEJiR5kiXQ1N1FAiqBnv1W2f2/KU0sWONIXk+SMgyf3yA4wLv3VFUUTNSf9ymt5qXK5U36m4dc5gxSRJ lepXHxEm X-Rspamd-Queue-Id: 4YXvf72W1xz3x65 X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:16509, ipnet:3.96.0.0/15, country:US] In message <20250115044542.02F9C2F@slippy.cwsent.com>, Cy Schubert writes: > In message <20250115044157.4FB92114@slippy.cwsent.com>, Cy Schubert writes: > > In message <202501150008.50F08gFm067796@gitrepo.freebsd.org>, Rodrigo > > Osorio wr > > ites: > > > The branch 2025Q1 has been updated by rodrigo: > > > > > > URL: https://cgit.FreeBSD.org/ports/commit/?id=0076d20a96718a28f956cb3589 > f1 > > 03 > > > 6e48a75f04 > > > > > > commit 0076d20a96718a28f956cb3589f1036e48a75f04 > > > Author: Rodrigo Osorio > > > AuthorDate: 2025-01-14 23:21:25 +0000 > > > Commit: Rodrigo Osorio > > > CommitDate: 2025-01-14 23:58:53 +0000 > > > > > > net/rsync: update to 3.4.0 > > > > > > Full changelog: https://download.samba.org/pub/rsync/NEWS#3.4.0 > > > > > > Security: CVE-2024-12084 - Heap Buffer Overflow in Checksum Par > si > > ng > > > Security: CVE-2024-12085 - Info Leak via uninitialized Stack co > nt > > en > > > ts defeats ASLR > > > Security: CVE-2024-12086 - Server leaks arbitrary client files > > > Security: CVE-2024-12087 - Server can make client write files o > ut > > si > > > de of destination directory using symbolic links > > > Security: CVE-2024-12088 - --safe-links Bypass > > > Security: CVE-2024-12747 -⁠ symlink race condition > > > > > > PR: 284064 > > > Reported by: osa > > > > > > (cherry picked from commit 6afdd4c669193f2041216071d5723e474ae041bf) > > > --- > > > net/rsync/Makefile | 4 ++-- > > > net/rsync/distinfo | 10 +++++----- > > > net/rsync/pkg-plist | 2 +- > > > 3 files changed, 8 insertions(+), 8 deletions(-) > > > > > > diff --git a/net/rsync/Makefile b/net/rsync/Makefile > > > index 4fefdced0380..996d4edd997e 100644 > > > --- a/net/rsync/Makefile > > > +++ b/net/rsync/Makefile > > > @@ -1,5 +1,5 @@ > > > PORTNAME= rsync > > > -DISTVERSION= 3.3.0 > > > +DISTVERSION= 3.4.0 > > > CATEGORIES= net > > > MASTER_SITES= https://www.mirrorservice.org/sites/rsync.samba.org/src > > > / \ > > > http://rsync.mirror.garr.it/src/ \ > > > @@ -100,10 +100,10 @@ post-install: > > > @${MKDIR} ${STAGEDIR}${ETCDIR} > > > ${INSTALL_DATA} ${FILESDIR}/rsyncd.conf.sample ${STAGEDIR}${ETCDIR}/ > > > ${INSTALL_SCRIPT} ${WRKSRC}/support/rrsync ${STAGEDIR}${PREFIX}/sbin > > > - ${INSTALL_MAN} ${WRKSRC}/rrsync.1 ${STAGEDIR}${PREFIX}/share/man/man1/ > > > > > > post-install-DOCS-on: > > > @${MKDIR} ${STAGEDIR}${DOCSDIR} > > > ${INSTALL_DATA} ${PORTDOCS:S,^,${WRKSRC}/,} ${STAGEDIR}${DOCSDIR} > > > + ${INSTALL_DATA} ${WRKSRC}/support/rrsync.1.md ${STAGEDIR}${DOCSDIR} > > > > > > .include > > > diff --git a/net/rsync/distinfo b/net/rsync/distinfo > > > index 2e28240fb164..afe59a503dff 100644 > > > --- a/net/rsync/distinfo > > > +++ b/net/rsync/distinfo > > > @@ -1,5 +1,5 @@ > > > -TIMESTAMP = 1712443181 > > > -SHA256 (rsync-3.3.0.tar.gz) = 7399e9a6708c32d678a72a63219e96f23be0be2336 > e5 > > 0f > > > d1348498d07041df90 > > > -SIZE (rsync-3.3.0.tar.gz) = 1153969 > > > -SHA256 (rsync-patches-3.3.0.tar.gz) = 3dd51cd88d25133681106f68622ebedbf1 > 91 > > ab > > > 25a21ea336ba409136591864b0 > > > -SIZE (rsync-patches-3.3.0.tar.gz) = 98487 > > > +TIMESTAMP = 1736887703 > > > +SHA256 (rsync-3.4.0.tar.gz) = 8e942f95a44226a012fe822faffa6c7fc38c34047a > dd > > 3a > > > 0c941e9bc8b8b93aa4 > > > +SIZE (rsync-3.4.0.tar.gz) = 1167983 > > > +SHA256 (rsync-patches-3.4.0.tar.gz) = 51533dc5b9b4293d3499b673df185c9348 > 4f > > 3e > > > 6fcf2de52f9bf1f07fa3d7cbc1 > > > +SIZE (rsync-patches-3.4.0.tar.gz) = 103831 > > > diff --git a/net/rsync/pkg-plist b/net/rsync/pkg-plist > > > index c0f2998051d5..6614a2d1b5a3 100644 > > > --- a/net/rsync/pkg-plist > > > +++ b/net/rsync/pkg-plist > > > @@ -1,8 +1,8 @@ > > > bin/rsync > > > bin/rsync-ssl > > > sbin/rrsync > > > -share/man/man1/rrsync.1.gz > > > share/man/man1/rsync.1.gz > > > share/man/man1/rsync-ssl.1.gz > > > share/man/man5/rsyncd.conf.5.gz > > > +%%PORTDOCS%%%%DOCSDIR%%/rrsync.1.md > > > @sample %%ETCDIR%%/rsyncd.conf.sample > > > > > > > rsync appears to be broken. > > > > slippy# rsync -aHW --delete git-doc cwsys:`pwd` > > ABORTING due to invalid path from sender: git-doc/website/shared > > rsync error: requested action not supported (code 4) at flist.c(2693) > > [generator=3.4.0] > > slippy# > > > > Seems it can't handle symlinks anymore. > > > > > > -- > > Cheers, > > Cy Schubert > > FreeBSD UNIX: Web: https://FreeBSD.org > > NTP: Web: https://nwtime.org > > > > e^(i*pi)+1=0 > > > > > > > > Another error: > > slippy# rsync -aHW --delete git-src cwsys:`pwd` > Internal hashtable error: illegal key supplied! > rsync error: errors with program diagnostics (code 13) at hashtable.c(88) > [generator=3.4.0] > slippy# It's the -H (preserve hard links) flag that's causing the issue. Without the -H flag rsync will behave live cp -r, creating a new file for each symlink rather than linking them. Certainly an issue upstream will need to resolve. -- Cheers, Cy Schubert FreeBSD UNIX: Web: https://FreeBSD.org NTP: Web: https://nwtime.org e^(i*pi)+1=0