Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package rsync for openSUSE:Factory checked in at 2026-11-05 18:19:50 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rsync (Old) and /work/SRC/openSUSE:Factory/.rsync.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "rsync" Thu Nov 5 18:19:50 2026 rev:102 rq:1394915 version:3.5.2 Changes: -------- --- /work/SRC/openSUSE:Factory/rsync/rsync.changes 2026-10-28 17:45:52.817388017 +0100 +++ /work/SRC/openSUSE:Factory/.rsync.new.3759290/rsync.changes 2026-11-05 18:20:43.595743299 +0100 @@ -1,0 +2,51 @@ +Wed Nov 4 09:31:28 UTC 2026 - David Anes <[email protected]> + +- Update to 3.5.2 + - Security fixes: + - Bounded strong-checksum work when a malicious receiver + supplies weak checksums that collide with consecutive + rolling windows (CVE-2026-119741, bsc#1289289). + - Bug fixes: + - Fixed interrupted `--append` and `--inplace` transfers + writing the final 256 KiB buffer twice. An interrupted + destination now remains a clean prefix which the next + transfer can resume or repair. + - Fixed uploads through `rrsync` when the destination file + already exists. + - Fixed poor matching performance on large sparse and + repeated-block files when duplicate checksum chains + exhausted the search limit. + - Prevented the `--inplace` matcher from advancing its + aligned basis index beyond the available checksum entries. + This avoids signed overflow on large source files when the + peer supplies a small block count. + - Recovered from failed hard-link creation without aborting + or hanging the generator. + - Prevented an out-of-bounds write while invalidating a + sender checksum after a file read error when the + negotiated checksum length is zero. + - Fixed a daemon receiver stack overflow when queued + deletion output reached `--max-alloc`. + - Fixed a `--files-from` pull from a subdirectory of a daemon + module, which read each listed file from the module root + instead. + - Fixed password files whose first line is empty. + - Escaped terminal control characters in filenames and + diagnostics written to standard output, standard error and + log files. + - Restored daemon startup from accepted named Unix sockets on + standard input. + - Fixed forward-DNS hostname entries in daemon `hosts allow` + and `hosts deny` lists for IPv6 peers. + - Preserved Unix symlink permissions on systems which require + `fchmodat()` to change the mode of a symlink rather than its + target. + - Enhancements: + - Added `--nice` to adjust CPU and I/O scheduling priorities + for local and remote rsync processes. + - Added `--delay-symlinks` to defer creating new and changed + symlinks until other transferred files are in place. It + implies `--no-inc-recursive` and requires protocol 29 or + newer. + +------------------------------------------------------------------- Old: ---- rsync-3.5.1.tar.gz rsync-3.5.1.tar.gz.asc New: ---- rsync-3.5.2.tar.gz rsync-3.5.2.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rsync.spec ++++++ --- /var/tmp/diff_new_pack.WNd9D8/_old 2026-11-05 18:20:44.770792040 +0100 +++ /var/tmp/diff_new_pack.WNd9D8/_new 2026-11-05 18:20:44.772792123 +0100 @@ -34,7 +34,7 @@ %bcond_with gcc11 %endif Name: rsync -Version: 3.5.1 +Version: 3.5.2 Release: 0 Summary: Versatile tool for fast incremental file transfer License: GPL-3.0-or-later ++++++ rsync-3.5.1.tar.gz -> rsync-3.5.2.tar.gz ++++++ ++++ 15830 lines of diff (skipped)
