Commit Graph

18 Commits

Author SHA1 Message Date
Archana Polampalli
4415c5e23e rsync: upgrade 3.3.0 -> 3.4.1
CVEs addressed in this release:
CVE-2024-12084
CVE-2024-12085
CVE-2024-12086
CVE-2024-12087
CVE-2024-12088
CVE-2024-12747

Refreshed below patches:
makefile-no-rebuild.patch
determism.patch
0001-Add-missing-prototypes-to-function-declarations.patch

Changelog:
https://github.com/RsyncProject/rsync/blob/v3.4.1/NEWS.md
https://github.com/RsyncProject/rsync/blob/v3.4.0/NEWS.md

(From OE-Core rev: 25e139d8b2a52c85cf1353c8da246aedaedb40d1)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-01-20 13:38:59 +00:00
Wang Mingyu
73d1967498 rsync: upgrade 3.2.7 -> 3.3.0
0001-Add-missing-prototypes-to-function-declarations.patch
makefile-no-rebuild.patch
refreshed for 3.3.0

Changelog:
==========
- Fixed a bug with '--sparse --inplace' where a trailing gap in the source
  file would not clear out the trailing data in the destination file.
- Fixed an buffer overflow in the checksum2 code if SHA1 is being used for
  the checksum2 algorithm.
- Fixed an issue when rsync is compiled using '_FORTIFY_SOURCE' so that the
  extra tests don't complain about a strlcpy() limit value (which was too
  large, even though it wasn't possible for the larger value to cause an
  overflow).
- Add a backtick to the list of characters that the filename quoting needs to
  escape using backslashes.
- Fixed a string-comparison issue in the internal handling of '--progress' (a
  locale such as tr_TR.utf-8 needed the internal triggering of '--info' options
  to use upper-case flag names to ensure that they match).
- Make sure that a local transfer marks the sender side as trusted.
- Change the argv handling to work with a newer popt library -- one that likes
  to free more data than it used to.
- Rsync now calls 'OpenSSL_add_all_algorithms()' when compiled against an older
  openssl library.
- Fixed a problem in the daemon auth for older protocols (29 and before) if the
  openssl library is being used to compute MD4 checksums.
- Fixed 'rsync -VV' on Cygwin -- it needed a flush of stdout.
- Fixed an old stats bug that counted devices as symlinks.

(From OE-Core rev: 2c3b75a1f3b6d3177603b8982d61c5b8ba73aef0)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2024-04-16 08:07:03 +01:00
Khem Raj
608f3fec55 rsync: Delete pedantic errors re-ordering patch
It has been fixed by removing the check upstream see
9a3449a398

(From OE-Core rev: c6228b8371ea5c3c452db7b536948ae96d83844b)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-11-27 23:54:50 +00:00
Alexander Kanavin
a00b2f97f3 rsync: update 3.2.5 -> 3.2.7
Rebase patches.

(From OE-Core rev: 827c787893caa973c509acf7cac9e17fec5692a4)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-11-22 12:26:46 +00:00
Khem Raj
8d6b8fb086 rsync: Turn on -pedantic-errors at the end of 'configure'
This helps in building rsync without autoconf patch, since it will be a
while that the round trip is made, better to apply this patch here until
next release of autoconf.

(From OE-Core rev: 11522b98697befcf13076a90cec4f8ade1fa0645)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-09-01 10:14:01 +01:00
Khem Raj
51d8e0e20e rsync: Add missing prototypes to function declarations
(From OE-Core rev: c53d465865d4a9c109322074c2653a3a8b665238)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-08-21 22:51:41 +01:00
Khem Raj
61929f05d7 rsync: Upgrade to 3.2.5
Changlog is here [1]
[1] https://download.samba.org/pub/rsync/NEWS#3.2.5

(From OE-Core rev: 937a28a2a83abc3923cf2793eb79b0a1f770cd54)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-08-16 14:57:58 +01:00
Khem Raj
6baf9b07a8 rsync: Backport fix to address CVE-2022-29154
CVE: CVE-2022-29154

(From OE-Core rev: a0a0358418c2bf6bc7a7128acbfcb4e99f8f764a)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-08-16 14:57:58 +01:00
Alexander Kanavin
2a39819c39 rsync: update 3.2.3 -> 3.2.4
Drop configure options that have been removed upstream.

License-Update: formatting
(From OE-Core rev: bc9bf4c2ea4230391fc3ee2f55d1f73e1dd39edf)

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2022-05-05 21:17:38 +01:00
Chen Qi
c9e8724e26 rsync: fix CVE-2020-14387
Backport patch to fix CVE-2020-14387.

(From OE-Core rev: 13f331436747ebb8e9211feee3aa774f1acd0fee)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-04-26 14:14:42 +01:00
Richard Purdie
6d3b755183 rsync: Update patch status
Mark the path as submitted and effectively a backport as a different fix
was added upstream addressing the issue.

(From OE-Core rev: 6e82c6e1543f1e863b22d94652c90ee46b40f68a)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-26 15:21:21 +00:00
Richard Purdie
2d2f017240 rsync: Fix a file sorting determinism issue
(From OE-Core rev: f6b7f395ae2d98363e365d31f5e95ce41a12e5b4)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-02-23 22:35:01 +00:00
Alexander Kanavin
ce74971998 rsync: update 3.2.1 -> 3.2.2
(From OE-Core rev: a1b6e078e12fb3cd5057076d6ecd60152fd35074)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-08-02 14:42:08 +01:00
Alexander Kanavin
17d50354bf rsync: update 3.1.3 -> 3.2.1
Drop all CVE patches, add the new configure options.

(From OE-Core rev: d0249eeeeeb951bfcf7606563c0cde02d49f200d)

Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2020-06-28 08:36:00 +01:00
Anuj Mittal
db32c9bda3 rsync: fix CVEs for included zlib
rsync includes its own copy of zlib and doesn't recommend linking with
the system version [1].

Import CVE fixes that impact zlib version 1.2.8 [2] that is currently used
by rsync.

[1] https://git.samba.org/rsync.git/?p=rsync.git;a=blob;f=zlib/README.rsync
[2] https://nvd.nist.gov/vuln/search/results?form_type=Advanced&cves=on&cpe_version=cpe%3a%2fa%3agnu%3azlib%3a1.2.8

(From OE-Core rev: a55fbb4cb489853dfb0b4553f6e187c3f3633f48)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2019-07-19 16:19:14 +01:00
Ross Burton
88f41780ca rsync: remove upstream's rebuild logic
Upstream some well intended but broken logic to reimplement the rebuild
functionality of automake. However this isn't out-of-tree safe and quite basic,
which means if it ever does execute (say, configure.ac or aclocal.m4 is touched)
then the build fails.

As we delete ${B} and re-run autoreconf on every build this is redundant, so
just delete it all.

[ YOCTO #9445 ]

(From OE-Core rev: ccc61cee8f097862640722abb9a9f53781efdac3)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-13 10:12:52 +01:00
Ross Burton
384e41c2c0 rsync: don't install acinclude.m4
This acinclude.m4 was actually a stale copy of upstream's generated aclocal.m4.
This generates correctly now, so there isn't a need to install this by hand
anymore.

(From OE-Core rev: 2d1948eb325bb769af97634f99efeffe3d43cfc9)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-04-13 10:12:52 +01:00
Richard Purdie
29d6678fd5 Major layout change to the packages directory
Having one monolithic packages directory makes it hard to find things
and is generally overwhelming. This commit splits it into several
logical sections roughly based on function, recipes.txt gives more
information about the classifications used.

The opportunity is also used to switch from "packages" to "recipes"
as used in OpenEmbedded as the term "packages" can be confusing to
people and has many different meanings.

Not all recipes have been classified yet, this is just a first pass
at separating things out. Some packages are moved to meta-extras as
they're no longer actively used or maintained.

Signed-off-by: Richard Purdie <rpurdie@linux.intel.com>
2010-08-27 15:29:45 +01:00