Changelog for rsync-debugsource-3.1.3-lp150.2.1.x86_64.rpm :

* Tue Apr 03 2018 kukukAATTsuse.de- Use %license instead of %doc [bsc#1082318]
* Mon Jan 29 2018 pmonrealgonzalezAATTsuse.com- Update to version 3.1.3 [bsc#1076503]: Protocol: 31 (unchanged)- SECURITY FIXES:
* Fixed a buffer overrun in the protocol\'s handling of xattr names and ensure that the received name is null terminated.
* Fix an issue with --protect-args where the user could specify the arg in the protected-arg list and short-circuit some of the arg-sanitizing code.- BUG FIXES:
* Don\'t output about a new backup dir without appropriate info verbosity.
* Fixed some issues with the sort functions in support/rsyncstats script.
* Added a way to specify daemon config lists (e.g. users, groups, etc)
* that contain spaces (see \"auth users\" in the latest rsyncd.conf manpage).
* If a backup fails (e.g. full disk) rsync exits with an error.
* Fixed a problem with a doubled --fuzzy option combined with --link-dest.
* Avoid invalid output in the summary if either the start or end time had an error.
* We don\'t allow a popt alias to affect the --daemon or --server options.
* Fix daemon exclude code to disallow attribute changes in addition to disallowing transfers.
* Don\'t force nanoseconds to match if a non-transferred, non-checksummed file only passed the quick-check w/o comparing nanosecods.- ENHANCEMENTS:
* Added the ability for rsync to compare nanosecond times in its file-check comparisons, and added support nanosecond times on Mac OS X.
* Added a short-option (-AATT) for --modify-window.
* Added the --checksum-choice=NAME[,NAME] option to choose the checksum algorithms.
* Added hashing of xattr names (with using -X) to improve the handling of files with large numbers of xattrs.
* Added a way to filter xattr names using include/exclude/filter rules (see the --xattrs option in the manpage for details).
* Added \"daemon chroot|uid|gid\" to the daemon config (in addition to the old chroot|uid|gid settings that affect the daemon\'s transfer process).
* Added \"syslog tag\" to the daemon configuration.
* Some manpage improvements.- DEVELOPER RELATED:
* Tweak the \"make\" output when yodl isn\'t around to create the man pages.
* Changed an obsolete autoconf compile macro.
* Support newer yodl versions when converting man pages.- Dropped patches fixed upstream:
* rsync-CVE-2017-16548.patch
* rsync-3.1.2-CVE-2018-5764.patch- Refreshed patches:
* rsync-send_error_to_sender.patch
* Thu Jan 18 2018 pmonrealgonzalezAATTsuse.com- Security fix: Ignore --protect-args when already sent by client [bsc#1076503, CVE-2018-5764]
* Added patch rsync-3.1.2-CVE-2018-5764.patch
* Tue Jan 09 2018 pmonrealgonzalezAATTsuse.com- Fix: Stop file upload after errors [bsc#1062063]- Added patches:
* rsync-send_error_to_sender.patch
* rsync-avoid-uploading-after-error.patch
* Tue Nov 28 2017 pmonrealgonzalezAATTsuse.com- Security fix [bsc#1066644, CVE-2017-16548]
* Missing trailing \'\\0\' character check could lead to remote DoS
* Added rsync-CVE-2017-16548.patch
* Tue Jul 25 2017 tchvatalAATTsuse.com- Try more in supporting all scenarios bsc#1046197#c24
* rsync-both-compressions.patch
* Mon Jul 24 2017 tchvatalAATTsuse.com- Execute tests to ensure the basics are still working
* Mon Jul 24 2017 tchvatalAATTsuse.com- Refresh patch rsync-both-compressions.patch to include fix when using old-compress on new zlib on server too
* Thu Jul 13 2017 tchvatalAATTsuse.com- Add patch to build with both bundled and external zlib to support both compression methods at once bsc#1046197:
* rsync-both-compressions.patch
* Wed Jun 14 2017 tchvatalAATTsuse.com- We no longer need to inject the pid in post as we do not use the iniscript relying on it- Add socket activation service instead of the xinetd service- Verify in services the configuration to run actually exist- Drop sle11 support as it does not autoreconf anymore- Drop patch system-zlib.diff that was never applied- Switch to system popt and zlib:
* This should not cause issues now because upstream states the underlying issue why we used the bundled one was fixed by using more safeguarded error detection
* Wed Jan 06 2016 hskAATTimb-jena.de- update to 3.1.2- drop patches rsync-CVE-2014-9512.patch, rsync-equivalent_of_CVE-2014-8242.patch (applied upstream)
* Wed Oct 07 2015 vcizekAATTsuse.com- better disable slp by default, it doesn\'t seem to be used much and it often caused problems (eg boo#898513, bsc#922710)
* set \"use slp\" in rsyncd.conf to enable
* modified rsync-add_back_use_slp_directive.patch
* Tue Oct 06 2015 vcizekAATTsuse.com- add a compatibility flag to avoid checksum collisions (bsc#900914)
* fixes rsync equivalent of librsync\'s CVE-2014-8242
* added rsync-equivalent_of_CVE-2014-8242.patch- modify rsync-add_back_use_slp_directive.patch
* Tue Aug 11 2015 vcizekAATTsuse.com- reintroduce \"use slp\" directive (bsc#922710)
* added rsync-add_back_use_slp_directive.patch
* Wed Feb 25 2015 crrodriguezAATTopensuse.org- rsync-no-libattr.patch: Use AC_SEARCH_LIBS([getxattr], [attr]) instead of AC_CHECK_LIB(attr,getxattr) so libattr is not injected as a dependency when glibc is enough since several years to use getxattr.
* Mon Feb 02 2015 vcizekAATTsuse.com- fix for CVE-2014-9512 (bnc#915410)
* path spoofing attack vulnerability
* added rsync-CVE-2014-9512.patch
* Fri Nov 14 2014 dimstarAATTopensuse.org- No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify.
* Sun Oct 19 2014 p.drouandAATTgmail.com- Do not depend on insserv if the system supports systemd; it\'s useless
* Thu Jul 10 2014 kruberAATTzib.de- update to 3.1.1- drop rsync-CVE-2014-2855.patch (applied upstream)- drop 0001-use-lp_num_modules-instead-of-the-removed-lp_numserv.patch (applied upstream)
* Fri Jun 20 2014 crrodriguezAATTopensuse.org- Remove sysvinit support on distros that have systemd- Remove libattr-devel from buildRequires, application does not link to libattr but it picks the glibc implementation instead.
* Tue Apr 15 2014 vcizekAATTsuse.com- fix for CVE-2014-2855 (bnc#873740)
* a denial of service via CPU consumption
* added rsync-CVE-2014-2855.patch
* Fri Oct 25 2013 vcizekAATTsuse.com- update to 3.1.0
* fixes bnc#845185- don\'t apply drop-cache.patch (removed from upstream)- add 0001-use-lp_num_modules-instead-of-the-removed-lp_numserv.patch- add gpg-offline tarball checking
* Mon Aug 05 2013 vcizekAATTsuse.com- add time-limit.patch from co-distributed rsync-patches as we do on SLE (fate#312479)
* Mon Jun 17 2013 jengelhAATTinai.de- Explicitly list libattr-devel as BuildRequires- More robust make install call. Remove redundant %clean section.
* Fri Apr 05 2013 idonmezAATTsuse.com- Add Source URL, see https://en.opensuse.org/SourceUrls
* Thu Jul 26 2012 crrodriguezAATTopensuse.org- All daemons that create temporary files must have PrivateTmp=true set in systemd unit if possible.
* Mon Feb 06 2012 crrodriguezAATTopensuse.org- Build with PIE and full RELRO
* Wed Dec 21 2011 cooloAATTsuse.com- add autoconf as buildrequire to avoid implicit dependency
* Fri Nov 25 2011 crrodriguezAATTopensuse.org- Add systemd unit- Do not BuildRequire textlive
* Wed Oct 12 2011 crrodriguezAATTopensuse.org- Update to version 3.0.9
* Apply drop-cache patch from rsync-patches tarball, adds option - -drop-cache so rsync is drop the memory cache of files when finished (aka. stop trashing the system)
* Fix a crash bug in checksum scanning when --inplace is used.
* Fix a memory leak in the xattr code.
* See NEWS for more detail
* Thu May 12 2011 chrisAATTcomputersalat.de- fix build for SLE (spec-cleaner changes) o makeinstall, _initddir
* Thu May 05 2011 puzelAATTnovell.com- updated summary (bnc#691944) and description
* Tue Mar 29 2011 puzelAATTnovell.com- update to rsync-3.0.8 - Notable changes: - Fixed two buffer-overflow issues. - Fixed a data-corruption issue when preserving hard-links without preserving file ownership, and doing deletions either before or during the transfer (CVE-2011-1097). - Fixed a potential crash when an rsync daemon has a filter/exclude list and the transfer is using ACLs or xattrs. - Fixed a hang if a really large file is being processed by an rsync that can\'t handle 64-bit numbers. - For devices and special files, we now avoid gathering useless ACL and/or xattr information for files that aren\'t being copied. - Properly handle requesting remote filenames that start with a dash. - Fixed a bug in the comparing of upper-case letters in file suffixes for --skip-compress. - If an rsync daemon has a module configured without a path setting, rsync will now disallow access to that module. - Some improvements to the hard-linking code to ensure that device-number hashing is working right, and to supply more information if the hard-link code fails. - Fixed a bug that prevented --numeric-ids from disabling the translation of user/group IDs for ACLs. - The --link-dest checking for identical symlinks now avoids considering attribute differences that cannot be changed on the receiver. - Fixed a bug with --fake-super when copying files and dirs that aren\'t user writable. - Fixed a bug where a sparse file could have its last sparse block turned into a real block when rsync sets the file size (requires ftruncate). - Fixed the working of --force when used with --one-file-system. - Various manpage improvements.- run spec-cleaner
* Sun Sep 19 2010 jengelhAATTmedozas.de- rsyncd.rc changes:
* Do not use killproc -TERM, but just killproc, so that killproc waits until the service is actually shut down, before attempting to restart it (when \"restart\" is used). Fixes bnc#546977.
* Change the \"reload\" action to return \"missing\" because rsyncd does not handle SIGHUP
* Adjust \"force-reload\" accordingly
* Mon Jan 04 2010 puzelAATTnovell.com- update to rsync-3.0.7 - Fixed a bogus free when using --xattrs with --backup. - Avoid an error when --dry-run was trying to stat a prior hard-link file that hasn\'t really been created. - Fixed a problem with --compress (-z) where the receiving side could return the error \"inflate (token) returned -5\". - Fixed a bug where --delete-during could delete in a directory before it noticed that the sending side sent an I/O error for that directory (both sides of the transfer must be at least 3.0.7). - Improved --skip-compress\'s error handling of bad character-sets and got rid of a lingering debug fprintf(). - Fixed the daemon\'s conveyance of io_error value from the sender. - An rsync daemon use seteuid() (when available) if it used setuid(). - Get the permissions right on a --fake-super transferred directory that needs more owner permissions to emulate root behavior. - An absolute-path filter rule (i.e. with a \'/\' modifier) no longer loses its modifier when sending the filter rules to the remote rsync. - Improved the \"--delete does not work without -r or -d\" message. - Improved rsync\'s handling of --timeout to avoid a weird timeout case where the sender could timeout even though it has recently written data to the socket (but hasn\'t read data recently, due to the writing). - Some misc manpage improvements. - Fixed the chmod-temp-dir testsuite on a system without /var/tmp. - Make sure that a timeout specified in the daemon\'s config is used as a maximum timeout value when the user also specifies a timeout. - Improved the error-exit reporting when rsync gets an error trying to cleanup after an error: the initial error is reported. - The AIX sysacls routines will now return ENOSYS if ENOTSUP is missing. - Made our (only used if missing) getaddrinfo() routine use inet_pton() (which we also provide) instead of inet_aton(). - The exit-related debug messages now mention the program\'s role so it is clear who output what message.
* Fri Aug 21 2009 chrisAATTcomputersalat.de- spec mods o sorted TAGS o added missing clean section- rpmlint o non-conffile-in-etc /etc/sysconfig/SuSEfirewall2.d/services/rsync-server
* Wed Aug 05 2009 puzelAATTnovell.com- bump version to 3.0.6- drop rsync-allow-slp-disable.patch (merged upstream)
* Tue May 05 2009 puzelAATTsuse.cz- add rsync-allow-slp-disable.patch (FATE#306331)
* Thu Apr 16 2009 puzelAATTsuse.cz- update to 3.0.6pre1 (bugfix release)- noteworthy changes: - Fixed a --read-batch hang when rsync is reading a batch file that was created from an incremental-recursion transfer - Fixed the daemon\'s socket code to handle the simultaneous arrival of multiple connections. - Fix --safe-links/--copy-unsafe-links to properly handle symlinks that have consecutive slashes in the value. - Fixed the parsing of an [IPv6_LITERAL_ADDR] when a USERAATT is prefixed. - The sender now skips a (bogus) symlink that has a 0-length value, which avoids a transfer error in the receiver. - Fixed a case where the sender could die with a tag-0 error if there was an I/O during the sending of the file list. - Fixed the rrsync script to avoid a server-side problem when -e is at the start of the short options. - Fixed a problem where a vanished directory could turn into an exit code 23 instead of the proper exit code 24. - Fixed the --iconv conversion of symlinks when doing a local copy. receiving side when a mount-point directory did not match a directory in the transfer. - Fixed the dropping of an ACL mask when no named ACL values were present. - Fixed an ACL/xattr corruption issue where the --backup option could cause rsync to associate the wrong ACL/xattr information with received files. - Fixed the use of --xattrs with --only-write-batch. - Fixed the use of --dry-run with --read-batch. - Fixed a run-time issue for systems that can\'t find iconv_open() by adding the --disable-iconv-open configure option. - Complain and die if the user tries to combine --remove-source-files (or the deprecated --remove-sent-files) with --read-batch.
* Tue Mar 24 2009 puzelAATTsuse.cz- add rsync-3.0.5-doc-fix.patch (bnc#487591)