CVS commit: pkgsrc/net/rsync

"Thomas Klausner" <[email protected]>
Newsgroups gmane.os.netbsd.devel.pkgsrc.cvs
Message-ID <[email protected]>
Module Name:	pkgsrc
Committed By:	wiz
Date:		Thu Aug 13 06:17:23 UTC 2026

Modified Files:
	pkgsrc/net/rsync: Makefile distinfo

Log Message:
rsync: update to 3.5.0.

This release fixes 33 security issues found during a focused audit
of rsync's path handling and daemon protocol, a companion
daemon-protocol fuzzing pass, and reports from external researchers
-⁠-⁠ plus several robustness hardenings. CVE IDs were assigned by
VulnCheck (CNA); the precise "introduced in" version ranges accompany
each advisory, and many are much narrower than "everything before
3.5.0". Every fix ships with a regression test in the test suite
that fails on the unfixed tree.

Full details at https://download.samba.org/pub/rsync/NEWS#3.5.0


To generate a diff of this commit:
cvs rdiff -u -r1.134 -r1.135 pkgsrc/net/rsync/Makefile
cvs rdiff -u -r1.67 -r1.68 pkgsrc/net/rsync/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
(unnamed) (text/x-diff, 1.6 KB)
Modified files:

Index: pkgsrc/net/rsync/Makefile
diff -u pkgsrc/net/rsync/Makefile:1.134 pkgsrc/net/rsync/Makefile:1.135
--- pkgsrc/net/rsync/Makefile:1.134	Mon Jun  8 05:45:27 2026
+++ pkgsrc/net/rsync/Makefile	Thu Aug 13 06:17:23 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.134 2026/06/08 05:45:27 wiz Exp $
+# $NetBSD: Makefile,v 1.135 2026/08/13 06:17:23 wiz Exp $
 
-DISTNAME=	rsync-3.4.4
+DISTNAME=	rsync-3.5.0
 CATEGORIES=	net
 MASTER_SITES=	http://rsync.samba.org/ftp/rsync/
 MASTER_SITES+=	http://rsync.samba.org/ftp/rsync/old-versions/

Index: pkgsrc/net/rsync/distinfo
diff -u pkgsrc/net/rsync/distinfo:1.67 pkgsrc/net/rsync/distinfo:1.68
--- pkgsrc/net/rsync/distinfo:1.67	Mon Jun  8 05:45:27 2026
+++ pkgsrc/net/rsync/distinfo	Thu Aug 13 06:17:23 2026
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.67 2026/06/08 05:45:27 wiz Exp $
+$NetBSD: distinfo,v 1.68 2026/08/13 06:17:23 wiz Exp $
 
-BLAKE2s (rsync-3.4.4.tar.gz) = 2a7620bbb021a607d06ae380496e4320fe9328ca750759a2a343ff262cf331ed
-SHA512 (rsync-3.4.4.tar.gz) = cf9a838b1f019b70fd67fa2c293f267be3f24e579c2ea33177ec7afc502c97ce0b613ff0854088c0eb28acd14ee0a75706ae8445115cef4669bd586c505d8453
-Size (rsync-3.4.4.tar.gz) = 1223040 bytes
+BLAKE2s (rsync-3.5.0.tar.gz) = cbeec5e81787e407a26e9a9e18c95d4e75344e0ce86c3e9fef12b127b49ee808
+SHA512 (rsync-3.5.0.tar.gz) = 6c5bada017e4e5f5b451058e2d1863174a1807796525ef4188c1f40358ccbdd36604fd2275dceb1cc6a95ac04da211501553353026c48594c5a79eedb27ce68d
+Size (rsync-3.5.0.tar.gz) = 1892222 bytes
 SHA1 (patch-Makefile.in) = 701577726bdb3b91c97bba47c6be331505630a72
 SHA1 (patch-acls.c) = 9be60c0c1abedc961fa95bba2bb23d802a09bc62
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.