Commit Graph

Select branches

Hide Pull Requests

352-release

b3.0.x

daemon-unix-stdin

fix/rsync-ssl-socat-transport

master

nice-process-priorities

pr-VFS

pr-fix-ia64-strlcpy

pr-maintainer-updates

pr-release-3.4.0

pr-remove-alloca-dep

rework-workflows

solaris-o-cloexec

symlink-chmod-unsupported

v3.2.7-sec-patches

v3.2.7-sec-patches3

v3.2.7-sec-patches4

v3.4-stable

v3.4.1-sec-patches

v3.4.1-sec-patches3

v3.4.1-sec-patches4

v34-stable-testsuite

#1

#10

#1000

#1001

#1001/merge

#1003

#1004

#1005

#1006

#1007

#1007/merge

#1008

#1008/merge

#1009

#1010

#1011

#1012

#1013

#1014

#1016

#1016/merge

#1017

#1018

#1018/merge

#1019

#1019/merge

#102

#1022

#1022/merge

#1024

#1026

#1027

#1028

#1029

#1029/merge

#103

#1030

#1030/merge

#1031

#1031/merge

#1032

#1034

#1034/merge

#1036

#1036/merge

#1038

#1039

#104

#1040

#1041

#1042

#1043

#1043/merge

#1047

#1048

#1049

#1051

#1052

#1054

#1055

#1057

#1058

#1059

#1060

#1061

#1062

#1063

#1065

#1069

#1070

#1071

#1072

#1073

#1074

#1075

#1077

#1078

#108

#1082

#1085

#1088

#1091

#1092

#1093

#1094

#1096

#1098

#1101

#1102

#1102/merge

#1106

#1108

#1109

#1109/merge

#1110

#1113

#1114

#1116

#1120

#1121

#1122

#1122/merge

#1124

#1125

#1127

#1129

#1130

#1132

#1133

#1136

#1137

#1138

#1139

#1140

#1141

#1142

#1144

#1145

#1145/merge

#1146

#1148

#1148/merge

#12

#124

#137

#155

#16

#160

#161

#174

#175

#178

#179

#18

#191

#198

#198/merge

#2

#20

#201

#204

#206

#210

#212

#214

#216

#22

#220

#23

#235

#238

#24

#241

#247

#25

#250

#252

#259

#265

#268

#273

#28

#290

#291

#291/merge

#293

#294

#295

#3

#300

#302

#305

#306

#307

#308

#31

#311

#316

#320

#327

#334

#339

#35

#358

#36

#369

#37

#374

#377

#38

#389

#39

#390

#390/merge

#393

#4

#424

#426

#426/merge

#428

#442

#442/merge

#459

#461

#465

#473

#473/merge

#475

#476

#477

#478

#482

#482/merge

#487

#487/merge

#49

#5

#501

#501/merge

#504

#504/merge

#513

#514

#514/merge

#521

#523

#523/merge

#536

#539

#54

#540

#542

#543

#55

#551

#551/merge

#554

#554/merge

#557

#558

#559

#581

#585

#586

#588

#59

#591

#592

#593

#594

#595

#595/merge

#6

#601

#608

#608/merge

#61

#610

#610/merge

#612

#614

#62

#623

#623/merge

#639

#639/merge

#64

#65

#656

#656/merge

#66

#665

#67

#68

#681

#687

#69

#690

#693

#694

#696

#698

#700

#703

#705

#706

#707

#709

#711

#712

#716

#719

#719/merge

#726

#728

#73

#730

#731

#736

#737

#74

#740

#744

#747

#747/merge

#75

#751

#751/merge

#753

#757

#757/merge

#766

#771

#778

#779

#780

#780/merge

#781

#781/merge

#790

#791

#794

#795

#796

#796/merge

#800

#800/merge

#801

#801/merge

#803

#803/merge

#807

#816

#816/merge

#817

#822

#822/merge

#826

#831

#835

#836

#840

#840/merge

#844

#852

#852/merge

#853

#857

#858

#859

#861

#864

#867

#872

#873

#874

#875

#876

#877

#878

#879

#881

#883

#885

#886

#887

#888

#890

#892

#893

#893/merge

#894

#894/merge

#895

#898

#9

#901

#902

#903

#906

#907

#908

#909

#909/merge

#913

#914

#916

#917

#918

#918/merge

#919

#920

#921

#923

#925

#93

#930

#931

#932

#933

#935

#937

#938

#939

#939/merge

#942

#943

#945

#946

#947

#947/merge

#948

#948/merge

#952

#953

#954

#955

#956

#957

#958

#960

#961

#962

#963

#964

#965

#966

#967

#967/merge

#969

#970

#971

#972

#973

#974

#975

#976

#977

#978

#979

#980

#981

#981/merge

#982

#982/merge

#983

#984

#984/merge

#985

#985/merge

#986

#987

#988

#989

#99

#990

#991

#992

#993

#994

#995

#996

#996/merge

#998

#999

mbp_bk_export0

v1.6.4

v1.6.5

v1.6.6

v1.6.7

v1.6.8

v1.6.9

v1.7.0

v1.7.1

v1.7.2

v1.7.3

v1.7.4

v2.0.0

v2.0.1

v2.0.10

v2.0.11

v2.0.12

v2.0.13

v2.0.14

v2.0.15

v2.0.16

v2.0.17

v2.0.18

v2.0.19

v2.0.2

v2.0.3

v2.0.4

v2.0.5

v2.0.6

v2.0.7

v2.0.8

v2.0.9

v2.1.0

v2.1.1

v2.2.0

v2.2.1

v2.3.0

v2.3.1

v2.3.2

v2.3.3

v2.3.3pre1

v2.4.0

v2.4.1

v2.4.2

v2.4.3

v2.4.4

v2.4.5

v2.4.6

v2.4.7pre1

v2.4.7pre2

v2.4.7pre4

v2.4.8

v2.4.8pre1

v2.5.0

v2.5.1

v2.5.1pre1

v2.5.1pre2

v2.5.1pre3

v2.5.2

v2.5.2pre1

v2.5.2pre2

v2.5.2pre3

v2.5.3

v2.5.3pre1

v2.5.4

v2.5.4pre1

v2.5.5

v2.5.5.rc1

v2.5.6

v2.5.7

v2.6.0

v2.6.0pre1

v2.6.0pre2

v2.6.1

v2.6.1pre1

v2.6.1pre2

v2.6.2

v2.6.2pre1

v2.6.3

v2.6.3pre1

v2.6.3pre2

v2.6.4

v2.6.4pre1

v2.6.4pre2

v2.6.4pre3

v2.6.4pre4

v2.6.5

v2.6.5pre1

v2.6.5pre2

v2.6.6

v2.6.6pre1

v2.6.7

v2.6.7pre1

v2.6.7pre2

v2.6.7pre3

v2.6.8

v2.6.8pre1

v2.6.9

v2.6.9pre1

v2.6.9pre2

v2.6.9pre3

v3.0.0

v3.0.0pre1

v3.0.0pre10

v3.0.0pre2

v3.0.0pre3

v3.0.0pre4

v3.0.0pre5

v3.0.0pre6

v3.0.0pre7

v3.0.0pre8

v3.0.0pre9

v3.0.1

v3.0.1pre1

v3.0.1pre2

v3.0.1pre3

v3.0.2

v3.0.3

v3.0.3pre1

v3.0.3pre2

v3.0.3pre3

v3.0.4

v3.0.4pre1

v3.0.4pre2

v3.0.5

v3.0.5pre1

v3.0.5pre2

v3.0.6

v3.0.6pre1

v3.0.7

v3.0.7pre1

v3.0.7pre2

v3.0.8

v3.0.8pre1

v3.0.9

v3.0.9pre1

v3.0.9pre2

v3.1.0

v3.1.0pre1

v3.1.1

v3.1.1pre1

v3.1.1pre2

v3.1.2

v3.1.2pre1

v3.1.3

v3.1.3pre1

v3.2.0

v3.2.0pre1

v3.2.0pre2

v3.2.0pre3

v3.2.1

v3.2.1pre1

v3.2.2

v3.2.2pre1

v3.2.2pre2

v3.2.2pre3

v3.2.3

v3.2.3pre1

v3.2.4

v3.2.4pre1

v3.2.4pre2

v3.2.4pre3

v3.2.4pre4

v3.2.5

v3.2.5pre1

v3.2.5pre2

v3.2.6

v3.2.7

v3.2.7-sec-patches1

v3.2.7pre1

v3.3.0

v3.3.0pre1

v3.4

v3.4.0

v3.4.1

v3.4.1-sec-patches1

v3.4.2

v3.4.3

v3.4.4

v3.5.0

v3.5.1

v3.5.2

Mono Color

• 30656c5e35 syscall: add symlink-race-safe do_*_at() wrappers and harden secure_relative_open Andrew TridgellandClaude Opus 4.7 2026-05-05 15:02:48 +10:00
• 15d2964256 util1: secure change_dir() against symlink-race chdir-escape Andrew TridgellandClaude Opus 4.7 2026-05-05 14:34:33 +10:00
• 862fe4eeaf syscall+receiver: secure receiver-side do_chmod against symlink-race TOCTOU Andrew TridgellandClaude Opus 4.7 2026-05-04 21:53:14 +10:00
• 859d44fa4f sender: fix read-path TOCTOU by opening from module root (CVE-2026-29518) Andrew TridgellandClaude Opus 4.6 2026-03-01 09:28:40 +11:00
• f1c24ab03b syscall+clientserver: am_chrooted and use_secure_symlinks for daemon-no-chroot (CVE-2026-29518) Andrew TridgellandClaude Opus 4.7 2025-12-31 10:01:23 +11:00
• 0ab4c3de6f util1: handle out-of-range times in timestring v3.2.7-sec-patches1 Andrew Tridgell 2026-05-15 10:27:22 +10:00
• d094c4723a main: reject hyphen-prefixed remote-shell hostnames Andrew Tridgell 2026-05-15 10:17:03 +10:00
• 36860669cc socket: reject over-long proxy response line Andrew Tridgell 2026-05-13 20:35:35 +10:00
• 0beceb95ac rsync.h: lower MAX_WIRE_DEL_STAT to avoid signed-int overflow in read_del_stats Andrew TridgellandClaude Opus 4.7 2026-05-14 14:45:21 +10:00
• cc84711567 util1: handle out-of-range times in timestring v3.4.1-sec-patches1 Andrew Tridgell 2026-05-15 10:27:22 +10:00
• 765d7446cc main: reject hyphen-prefixed remote-shell hostnames Andrew Tridgell 2026-05-15 10:17:03 +10:00
• f872627579 socket: reject over-long proxy response line Andrew Tridgell 2026-05-13 20:35:35 +10:00
• 25100258e9 rsync.h: lower MAX_WIRE_DEL_STAT to avoid signed-int overflow in read_del_stats Andrew TridgellandClaude Opus 4.7 2026-05-14 14:45:21 +10:00
• ec46dac93a Fix flaky hardlinks test Arnaud Rebillout 2025-03-06 10:54:05 +07:00
• 4370cb2ce1 testsuite: fixes for 3.2.7 backport Andrew Tridgell 2026-05-07 09:17:09 +10:00
• 861062369f CI: fix workflows for backport testing Andrew Tridgell 2026-05-07 07:03:54 +10:00
• f406c780ec popt: fix poptDupArgv strlcpy size argument Andrew TridgellandClaude Opus 4.7 2026-05-07 08:55:36 +10:00
• c633941941 ci: add Ubuntu 22.04 and AlmaLinux 8 workflows for backporting Andrew TridgellandClaude Opus 4.7 2026-05-07 05:27:45 +10:00
• 259e04f923 ci: update RSYNC_EXPECT_SKIPPED for 3.2.7 backport baseline Andrew TridgellandClaude Opus 4.7 2026-05-07 08:06:28 +10:00
• fc9a5d6452 defence-in-depth: receiver block-index bounds + read_delay_line null check Andrew TridgellandClaude Opus 4.7 2025-12-31 14:01:34 +11:00
• 189612f94a testsuite: use integer sleep in clean-fname-underflow.test Andrew TridgellandClaude Opus 4.7 2026-05-07 08:06:28 +10:00
• 3d5a5a6568 defence-in-depth: guard cumulative snprintf against length underflow Andrew TridgellandClaude Opus 4.7 2026-05-01 09:30:31 +10:00
• 9354f27f9d exclude: fix crashes with fortified strlcpy() Jiri Slaby 2023-08-18 08:26:20 +02:00
• ddd7b59a4f defence-in-depth: bound wire-supplied counts and lengths Andrew TridgellandClaude Opus 4.7 2025-12-31 12:56:54 +11:00
• a335091e91 CI: added workflows from master for backport testing Andrew Tridgell 2026-05-07 07:44:10 +10:00
• ac735929dc clientserver: fix hostname ACL bypass when using daemon chroot Andrew TridgellandClaude Opus 4.7 2025-12-31 13:50:35 +11:00
• 3ac8349e07 defence-in-depth: receiver block-index bounds + read_delay_line null check Andrew TridgellandClaude Opus 4.7 2025-12-31 14:01:34 +11:00
• 5564c88150 receiver: add parent_ndx<0 guard, mirroring 797e17f Andrew TridgellandClaude Opus 4.7 2026-05-05 16:48:16 +10:00
• 816aa32059 defence-in-depth: guard cumulative snprintf against length underflow Andrew TridgellandClaude Opus 4.7 2026-05-01 09:30:31 +10:00
• 275258bd76 testsuite: cover 'refuse options = compress' for the daemon Andrew TridgellandClaude Opus 4.7 2026-05-01 10:56:17 +10:00
• f50c1d59c4 defence-in-depth: bound wire-supplied counts and lengths Andrew TridgellandClaude Opus 4.7 2025-12-31 12:56:54 +11:00
• 9ad27c9d7b token: harden compressed-token decoding against integer overflow Andrew TridgellandClaude Opus 4.7 2026-04-29 11:10:59 +10:00
• 74ea276900 clientserver: fix hostname ACL bypass when using daemon chroot Andrew TridgellandClaude Opus 4.7 2025-12-31 13:50:35 +11:00
• 0cac014f89 testsuite: end-to-end regression test for chdir-symlink-race Andrew TridgellandClaude Opus 4.7 2026-05-05 14:34:50 +10:00
• 0a5fa00fdc receiver: add parent_ndx<0 guard, mirroring 797e17f Andrew TridgellandClaude Opus 4.7 2026-05-05 16:48:16 +10:00
• 90495eecd0 util1+syscall: secure copy_file source/dest opens; bare-path defence-in-depth Andrew TridgellandClaude Opus 4.7 2026-05-06 09:45:30 +10:00
• 4255413e0c testsuite: cover 'refuse options = compress' for the daemon Andrew TridgellandClaude Opus 4.7 2026-05-01 10:56:17 +10:00
• 72a6634479 syscall: add symlink-race-safe do_*_at() wrappers and harden secure_relative_open Andrew TridgellandClaude Opus 4.7 2026-05-05 15:02:48 +10:00
• 901041dddc token: harden compressed-token decoding against integer overflow Andrew TridgellandClaude Opus 4.7 2026-04-29 11:10:59 +10:00
• a2c1b98c2a util1: secure change_dir() against symlink-race chdir-escape Andrew TridgellandClaude Opus 4.7 2026-05-05 14:34:33 +10:00
• 7c8a647c2e testsuite: end-to-end regression test for chdir-symlink-race Andrew TridgellandClaude Opus 4.7 2026-05-05 14:34:50 +10:00
• d870b43a32 syscall+receiver: secure receiver-side do_chmod against symlink-race TOCTOU Andrew TridgellandClaude Opus 4.7 2026-05-04 21:53:14 +10:00
• a277a06b10 util1+syscall: secure copy_file source/dest opens; bare-path defence-in-depth Andrew TridgellandClaude Opus 4.7 2026-05-06 09:45:30 +10:00
• e57fd03284 sender: fix read-path TOCTOU by opening from module root (CVE-2026-29518) Andrew TridgellandClaude Opus 4.6 2026-03-01 09:28:40 +11:00
• 39b3074a1a syscall: add symlink-race-safe do_*_at() wrappers and harden secure_relative_open Andrew TridgellandClaude Opus 4.7 2026-05-05 15:02:48 +10:00
• f629772cc6 syscall+clientserver: am_chrooted and use_secure_symlinks for daemon-no-chroot (CVE-2026-29518) Andrew TridgellandClaude Opus 4.7 2025-12-31 10:01:23 +11:00
• d22b6bc7d1 util1: secure change_dir() against symlink-race chdir-escape Andrew TridgellandClaude Opus 4.7 2026-05-05 14:34:33 +10:00
• 24852cda3d syscall+receiver: secure receiver-side do_chmod against symlink-race TOCTOU Andrew TridgellandClaude Opus 4.7 2026-05-04 21:53:14 +10:00
• 99b36291d0 sender: fix read-path TOCTOU by opening from module root (CVE-2026-29518) Andrew TridgellandClaude Opus 4.6 2026-03-01 09:28:40 +11:00
• 1a5ad81add syscall+clientserver: am_chrooted and use_secure_symlinks for daemon-no-chroot (CVE-2026-29518) Andrew TridgellandClaude Opus 4.7 2025-12-31 10:01:23 +11:00
• 2b3f8aacc7 testsuite: skip symlink-dirlink-basis on platforms without RESOLVE_BENEATH Andrew TridgellandClaude Opus 4.7 2026-04-30 09:00:09 +10:00
• 61d987c54a syscall: also use O_RESOLVE_BENEATH on FreeBSD and MacOS Andrew TridgellandClaude Opus 4.7 2026-04-30 08:44:11 +10:00
• 72d1cf1c28 syscall: use openat2(RESOLVE_BENEATH) on Linux for secure_relative_open Andrew TridgellandClaude Opus 4.7 2026-04-30 08:39:22 +10:00
• 9ba21f638c testsuite/xattrs: ignore SUNWattr_* in the Solaris xls helper Andrew TridgellandClaude Opus 4.7 2026-04-30 08:18:01 +10:00
• acf4b7b839 call tzset() before chroot to cache timezone data Andrew TridgellandClaude Opus 4.6 2026-04-22 12:53:13 +10:00
• 968d4c0cd0 xattrs: fixed count in qsort Andrew Tridgell 2026-04-22 09:57:45 +10:00
• d69162dbf4 zero all new memory from allocations Andrew TridgellandClaude Opus 4.6 2026-04-22 10:59:11 +10:00
• cad6aab534 fix signed integer overflow in proxy protocol v2 header parsing Andrew Tridgell 2026-04-16 10:50:49 +10:00
• 7ab20b293f zlib: convert K&R function definitions to ANSI style Andrew TridgellandClaude Opus 4.6 2026-04-16 13:40:59 +10:00
• c822d0c404 Fix glibc-2.43 constness warnings Holger Hoffstätte 2026-04-06 00:44:02 +02:00
• f8d8bba793 fix uninitialized mul_one in AVX2 checksum and add SIMD checksum test Andrew TridgellandClaude Opus 4.6 2026-03-01 08:42:04 +11:00
• 43e2af4dd3 acl: fixed ACL ID mapping for non-root Andrew Tridgell 2026-01-19 11:14:40 +11:00
• 50f0add12a reject negative token values in compressed stream receivers Andrew Tridgell 2025-12-30 18:49:34 +11:00
• ada7ba004f fix uninitialized buf1 in get_checksum2() MD4 path Andrew Tridgell 2025-12-30 16:21:41 +11:00
• 41213d20d1 fixed an invalid access to files array Andrew Tridgell 2025-08-23 17:26:53 +10:00
• 03d0b41e64 testsuite: added clean-fname-underflow test Andrew Tridgell 2025-08-23 18:29:06 +10:00
• 934a6bec96 util: fixed issue in clean_fname() Andrew Tridgell 2025-08-23 19:14:59 +10:00
• 841ab71c7c configure.ac: check for xattr support both in libc and in -lattr Eli Schwartz 2025-04-22 16:17:55 -04:00
• ae1bc1b9e7 Using a correct time in log file Michal Ruprich 2025-01-31 14:35:18 +01:00
• 350d39a05d options.c: Fix segv if poptGetContext returns NULL Ronnie Sahlberg 2025-01-30 13:27:38 +10:00
• 9141bf1d83 syscall: fix a Y2038 bug by replacing Int32x32To64 with multiplication Silent 2025-01-13 15:01:06 +01:00
• ad7dc53795 fixed symlink race condition in sender Andrew Tridgell 2024-12-18 08:59:42 +11:00
• 5ddf470275 make --safe-links stricter Andrew Tridgell 2024-11-23 15:15:53 +11:00
• de7a95a775 range check dir_ndx before use Andrew Tridgell 2024-11-26 16:12:45 +11:00
• 14026162dc Refuse a duplicate dirlist. Wayne Davison 2024-11-14 15:46:50 -08:00
• 16666c6e75 disallow ../ elements in relpath for secure_relative_open Andrew Tridgell 2024-11-26 09:16:31 +11:00
• 866dd7131e receiver: use secure_relative_open() for basis file Andrew Tridgell 2024-11-23 12:28:13 +11:00
• b31301abb7 added secure_relative_open() Andrew Tridgell 2024-11-23 12:26:10 +11:00
• 769e5f0bcf refuse fuzzy options when fuzzy not selected Andrew Tridgell 2024-11-23 11:08:03 +11:00
• ce06002ce8 prevent information leak off the stack Andrew Tridgell 2024-11-14 09:57:08 +11:00
• 9119310d01 Another cast when multiplying integers. Wayne Davison 2024-11-05 11:01:03 -08:00
• 147c7a0d97 Some checksum buffer fixes. Wayne Davison 2024-10-29 22:55:29 -07:00
• 77b7f5e0aa Fix warning about missing bomb(..) prototype Holger Hoffstätte 2023-09-04 14:05:21 +02:00
• 292d9de105 bool is a keyword in C23 Michal Ruprich 2025-01-17 12:37:57 +01:00
• f1cf29cefa hlink: Fix function pointer cast in qsort() Charalampos Mitrodimas 2024-11-20 14:55:50 +02:00
• 9585830e1e Fix warning about conflicting lseek/lseek64 prototypes Holger Hoffstätte 2023-09-04 14:07:14 +02:00
• 6226386332 testsuite: skip symlink-dirlink-basis on platforms without RESOLVE_BENEATH Andrew TridgellandClaude Opus 4.7 2026-04-30 09:00:09 +10:00
• b32ba3ddb3 syscall: also use O_RESOLVE_BENEATH on FreeBSD and MacOS Andrew TridgellandClaude Opus 4.7 2026-04-30 08:44:11 +10:00
• 45ce54b546 syscall: use openat2(RESOLVE_BENEATH) on Linux for secure_relative_open Andrew TridgellandClaude Opus 4.7 2026-04-30 08:39:22 +10:00
• 3e5e159459 testsuite/xattrs: ignore SUNWattr_* in the Solaris xls helper Andrew TridgellandClaude Opus 4.7 2026-04-30 08:18:01 +10:00
• 892b48a60b call tzset() before chroot to cache timezone data Andrew TridgellandClaude Opus 4.6 2026-04-22 12:53:13 +10:00
• c009fcc8e6 xattrs: fixed count in qsort Andrew Tridgell 2026-04-22 09:57:45 +10:00
• dff93c92d1 zero all new memory from allocations Andrew TridgellandClaude Opus 4.6 2026-04-22 10:59:11 +10:00
• c35df318ad fix signed integer overflow in proxy protocol v2 header parsing Andrew Tridgell 2026-04-16 10:50:49 +10:00
• 09187a49a7 zlib: convert K&R function definitions to ANSI style Andrew TridgellandClaude Opus 4.6 2026-04-16 13:40:59 +10:00
• 6994fdf50e Fix glibc-2.43 constness warnings Holger Hoffstätte 2026-04-06 00:44:02 +02:00
• 350469f7cf fix uninitialized mul_one in AVX2 checksum and add SIMD checksum test Andrew TridgellandClaude Opus 4.6 2026-03-01 08:42:04 +11:00
• 79ffc5e3c5 acl: fixed ACL ID mapping for non-root Andrew Tridgell 2026-01-19 11:14:40 +11:00
• 4585f8a6f2 reject negative token values in compressed stream receivers Andrew Tridgell 2025-12-30 18:49:34 +11:00
• 487a548f70 fix uninitialized buf1 in get_checksum2() MD4 path Andrew Tridgell 2025-12-30 16:21:41 +11:00