Commit Graph

Select branches

Hide Pull Requests

352-release

b3.0.x

daemon-unix-stdin

fix/rsync-ssl-socat-transport

master

nice-process-priorities

pr-VFS

pr-fix-ia64-strlcpy

pr-maintainer-updates

pr-release-3.4.0

pr-remove-alloca-dep

rework-workflows

solaris-o-cloexec

symlink-chmod-unsupported

v3.2.7-sec-patches

v3.2.7-sec-patches3

v3.2.7-sec-patches4

v3.4-stable

v3.4.1-sec-patches

v3.4.1-sec-patches3

v3.4.1-sec-patches4

v34-stable-testsuite

#1

#10

#1000

#1001

#1001/merge

#1003

#1004

#1005

#1006

#1007

#1007/merge

#1008

#1008/merge

#1009

#1010

#1011

#1012

#1013

#1014

#1016

#1016/merge

#1017

#1018

#1018/merge

#1019

#1019/merge

#102

#1022

#1022/merge

#1024

#1026

#1027

#1028

#1029

#1029/merge

#103

#1030

#1030/merge

#1031

#1031/merge

#1032

#1034

#1034/merge

#1036

#1036/merge

#1038

#1039

#104

#1040

#1041

#1042

#1043

#1043/merge

#1047

#1048

#1049

#1051

#1052

#1054

#1055

#1057

#1058

#1059

#1060

#1061

#1062

#1063

#1065

#1069

#1070

#1071

#1072

#1073

#1074

#1075

#1077

#1078

#108

#1082

#1085

#1088

#1091

#1092

#1093

#1094

#1096

#1098

#1101

#1102

#1102/merge

#1106

#1108

#1109

#1109/merge

#1110

#1113

#1114

#1116

#1120

#1121

#1122

#1122/merge

#1124

#1125

#1127

#1129

#1130

#1132

#1133

#1136

#1137

#1138

#1139

#1140

#1141

#1142

#1144

#1145

#1145/merge

#1146

#1148

#1148/merge

#12

#124

#137

#155

#16

#160

#161

#174

#175

#178

#179

#18

#191

#198

#198/merge

#2

#20

#201

#204

#206

#210

#212

#214

#216

#22

#220

#23

#235

#238

#24

#241

#247

#25

#250

#252

#259

#265

#268

#273

#28

#290

#291

#291/merge

#293

#294

#295

#3

#300

#302

#305

#306

#307

#308

#31

#311

#316

#320

#327

#334

#339

#35

#358

#36

#369

#37

#374

#377

#38

#389

#39

#390

#390/merge

#393

#4

#424

#426

#426/merge

#428

#442

#442/merge

#459

#461

#465

#473

#473/merge

#475

#476

#477

#478

#482

#482/merge

#487

#487/merge

#49

#5

#501

#501/merge

#504

#504/merge

#513

#514

#514/merge

#521

#523

#523/merge

#536

#539

#54

#540

#542

#543

#55

#551

#551/merge

#554

#554/merge

#557

#558

#559

#581

#585

#586

#588

#59

#591

#592

#593

#594

#595

#595/merge

#6

#601

#608

#608/merge

#61

#610

#610/merge

#612

#614

#62

#623

#623/merge

#639

#639/merge

#64

#65

#656

#656/merge

#66

#665

#67

#68

#681

#687

#69

#690

#693

#694

#696

#698

#700

#703

#705

#706

#707

#709

#711

#712

#716

#719

#719/merge

#726

#728

#73

#730

#731

#736

#737

#74

#740

#744

#747

#747/merge

#75

#751

#751/merge

#753

#757

#757/merge

#766

#771

#778

#779

#780

#780/merge

#781

#781/merge

#790

#791

#794

#795

#796

#796/merge

#800

#800/merge

#801

#801/merge

#803

#803/merge

#807

#816

#816/merge

#817

#822

#822/merge

#826

#831

#835

#836

#840

#840/merge

#844

#852

#852/merge

#853

#857

#858

#859

#861

#864

#867

#872

#873

#874

#875

#876

#877

#878

#879

#881

#883

#885

#886

#887

#888

#890

#892

#893

#893/merge

#894

#894/merge

#895

#898

#9

#901

#902

#903

#906

#907

#908

#909

#909/merge

#913

#914

#916

#917

#918

#918/merge

#919

#920

#921

#923

#925

#93

#930

#931

#932

#933

#935

#937

#938

#939

#939/merge

#942

#943

#945

#946

#947

#947/merge

#948

#948/merge

#952

#953

#954

#955

#956

#957

#958

#960

#961

#962

#963

#964

#965

#966

#967

#967/merge

#969

#970

#971

#972

#973

#974

#975

#976

#977

#978

#979

#980

#981

#981/merge

#982

#982/merge

#983

#984

#984/merge

#985

#985/merge

#986

#987

#988

#989

#99

#990

#991

#992

#993

#994

#995

#996

#996/merge

#998

#999

mbp_bk_export0

v1.6.4

v1.6.5

v1.6.6

v1.6.7

v1.6.8

v1.6.9

v1.7.0

v1.7.1

v1.7.2

v1.7.3

v1.7.4

v2.0.0

v2.0.1

v2.0.10

v2.0.11

v2.0.12

v2.0.13

v2.0.14

v2.0.15

v2.0.16

v2.0.17

v2.0.18

v2.0.19

v2.0.2

v2.0.3

v2.0.4

v2.0.5

v2.0.6

v2.0.7

v2.0.8

v2.0.9

v2.1.0

v2.1.1

v2.2.0

v2.2.1

v2.3.0

v2.3.1

v2.3.2

v2.3.3

v2.3.3pre1

v2.4.0

v2.4.1

v2.4.2

v2.4.3

v2.4.4

v2.4.5

v2.4.6

v2.4.7pre1

v2.4.7pre2

v2.4.7pre4

v2.4.8

v2.4.8pre1

v2.5.0

v2.5.1

v2.5.1pre1

v2.5.1pre2

v2.5.1pre3

v2.5.2

v2.5.2pre1

v2.5.2pre2

v2.5.2pre3

v2.5.3

v2.5.3pre1

v2.5.4

v2.5.4pre1

v2.5.5

v2.5.5.rc1

v2.5.6

v2.5.7

v2.6.0

v2.6.0pre1

v2.6.0pre2

v2.6.1

v2.6.1pre1

v2.6.1pre2

v2.6.2

v2.6.2pre1

v2.6.3

v2.6.3pre1

v2.6.3pre2

v2.6.4

v2.6.4pre1

v2.6.4pre2

v2.6.4pre3

v2.6.4pre4

v2.6.5

v2.6.5pre1

v2.6.5pre2

v2.6.6

v2.6.6pre1

v2.6.7

v2.6.7pre1

v2.6.7pre2

v2.6.7pre3

v2.6.8

v2.6.8pre1

v2.6.9

v2.6.9pre1

v2.6.9pre2

v2.6.9pre3

v3.0.0

v3.0.0pre1

v3.0.0pre10

v3.0.0pre2

v3.0.0pre3

v3.0.0pre4

v3.0.0pre5

v3.0.0pre6

v3.0.0pre7

v3.0.0pre8

v3.0.0pre9

v3.0.1

v3.0.1pre1

v3.0.1pre2

v3.0.1pre3

v3.0.2

v3.0.3

v3.0.3pre1

v3.0.3pre2

v3.0.3pre3

v3.0.4

v3.0.4pre1

v3.0.4pre2

v3.0.5

v3.0.5pre1

v3.0.5pre2

v3.0.6

v3.0.6pre1

v3.0.7

v3.0.7pre1

v3.0.7pre2

v3.0.8

v3.0.8pre1

v3.0.9

v3.0.9pre1

v3.0.9pre2

v3.1.0

v3.1.0pre1

v3.1.1

v3.1.1pre1

v3.1.1pre2

v3.1.2

v3.1.2pre1

v3.1.3

v3.1.3pre1

v3.2.0

v3.2.0pre1

v3.2.0pre2

v3.2.0pre3

v3.2.1

v3.2.1pre1

v3.2.2

v3.2.2pre1

v3.2.2pre2

v3.2.2pre3

v3.2.3

v3.2.3pre1

v3.2.4

v3.2.4pre1

v3.2.4pre2

v3.2.4pre3

v3.2.4pre4

v3.2.5

v3.2.5pre1

v3.2.5pre2

v3.2.6

v3.2.7

v3.2.7-sec-patches1

v3.2.7pre1

v3.3.0

v3.3.0pre1

v3.4

v3.4.0

v3.4.1

v3.4.1-sec-patches1

v3.4.2

v3.4.3

v3.4.4

v3.5.0

v3.5.1

v3.5.2

Mono Color

• 3c674b7fdf docs: NEWS + SECURITY.md for the 3.5.0 security release Andrew Tridgell 2026-06-21 15:16:39 +10:00
• 065ec23e4b testsuite: fleettest VM harness + version-mix expect manifests Andrew Tridgell 2026-06-21 15:16:39 +10:00
• 161608034e ci: scan-build gate (pinned clang-18) + informational latest-clang Andrew Tridgell 2026-06-21 15:16:39 +10:00
• 885a0a8ecc ci: per-platform build workflows + RSYNC_EXPECT_SKIPPED baselines Andrew Tridgell 2026-06-21 15:16:39 +10:00
• 32aa900fd0 testsuite: rrsync, rsync-ssl, batch, backup and misc Andrew Tridgell 2026-06-21 15:16:08 +10:00
• ae014a56f3 testsuite: daemon auth / access / proxy / config hardening Andrew Tridgell 2026-06-21 15:16:08 +10:00
• 72098206ce testsuite: daemon protocol robustness against malicious peers Andrew Tridgell 2026-06-21 15:16:08 +10:00
• 493a8e99d6 testsuite: ACL / xattr / special-file metadata Andrew Tridgell 2026-06-21 15:16:08 +10:00
• a55ab05c19 testsuite: daemon exclude/filter name-based behaviour Andrew TridgellandOmar Elsayed 2026-06-21 15:16:08 +10:00
• 4705b6fb92 testsuite: symlink-race and operator/peer path-resolution coverage Andrew TridgellandOmar Elsayed 2026-06-21 15:16:08 +10:00
• 1346bc623f testsuite: shared harness, helpers and unit-test programs Andrew Tridgell 2026-06-21 15:16:08 +10:00
• 88cee08963 rrsync: pin path components against a TOCTOU and fail closed on anomalies Andrew Tridgell 2026-06-21 15:13:27 +10:00
• 1604890301 batch/rsync-ssl: quote replay-script args and bind the SSL cert hostname Andrew Tridgell 2026-06-21 15:13:27 +10:00
• d199b43149 daemon: harden authentication, access, socket and config-hook handling Andrew Tridgell 2026-06-21 15:13:27 +10:00
• 3eeedf8d08 daemon: robustness against malicious-peer protocol input Andrew Tridgell 2026-06-21 15:13:27 +10:00
• b62d7ed6d4 acls/xattrs: race-safe fd-based metadata application Andrew Tridgell 2026-06-21 15:13:27 +10:00
• dd3e6bfece daemon: treat exclude=/filter as a name filter, not a symlink boundary Andrew Tridgell 2026-06-21 15:12:53 +10:00
• defd7110ac confine operator- and peer-supplied paths to the served module Andrew Tridgell 2026-06-21 15:12:37 +10:00
• 54965efca9 syscall/util1: race-safe path resolution via a held dirfd-stack resolver Andrew Tridgell 2026-06-21 15:06:55 +10:00
• adab781538 build: wire up the secure resolver, the ACL fd helper, and the test harnesses Andrew Tridgell 2026-06-21 15:06:32 +10:00
• 3b84610ccb manpage: clarify remote-shell daemon user@ handling Andrew Tridgell 2026-07-20 12:53:16 +10:00
• 9062840a91 ci: restore default build target Zen Dodd 2026-07-12 13:17:34 +10:00
• 3c9a12011e ci: fix no-AT_FDCWD compile check Zen Dodd 2026-07-12 13:11:43 +10:00
• 5cb4b8290b syscall: build without AT_SYMLINK_NOFOLLOW Zen Dodd 2026-07-12 13:00:49 +10:00
• e6956e0a30 match: bound the hash_search() chain walk (issue #217) Stuart Inglis 2026-07-01 07:29:16 +12:00
• e2a24e8581 testsuite: C23 bool compatibility Zen Dodd 2026-07-18 17:13:11 +10:00
• b6a388e166 github: gate PR CI on a 'run-ci' label to save CI minutes Andrew Tridgell 2026-07-19 18:27:34 +10:00
• 9108f520d2 wildtest: use stdbool.h so bool works from C99 through C23 Andrew Tridgell 2026-07-19 17:48:05 +10:00
• 4dc8e93c7d receiver: don't abort the transfer when a file grows during the run Andrew Tridgell 2026-07-19 18:27:21 +10:00
• 30a0f674b5 github: gate PR CI on a 'run-ci' label to save CI minutes Andrew Tridgell 2026-07-19 18:27:10 +10:00
• 23c1c716fd wildtest: use stdbool.h so bool works from C99 through C23 Andrew Tridgell 2026-07-19 17:48:05 +10:00
• bb731517a0 receiver: don't abort the transfer when a file grows during the run Andrew Tridgell 2026-07-19 18:26:31 +10:00
• 2ad7444d33 lib/sysxattrs: make write_xattr more robust Vladimir Marek 2026-06-30 08:50:42 +10:00
• 9726ac29fd acls: implement Solaris facl(2)-based ACL helpers Vladimir Marek 2026-06-30 08:50:42 +10:00
• 0c96e12fd6 lib/sysxattrs: make write_xattr more robust Vladimir Marek 2026-06-30 08:36:22 +10:00
• d903874d63 acls: implement Solaris facl(2)-based ACL helpers Vladimir Marek 2026-06-30 08:36:22 +10:00
• 2c20cf31dd rsync: never path-resolve a confined receiver's xattr/ACL write (copy-xattrs race) Andrew Tridgell 2026-06-28 08:54:11 +10:00
• 9e439251c7 rsync: never path-resolve a confined receiver's xattr/ACL write (copy-xattrs race) Andrew Tridgell 2026-06-28 08:54:11 +10:00
• 9559460084 util1: declare insecure_links extern for the change_dir opt-out (backport adapt) Andrew Tridgell 2026-06-27 18:24:53 +10:00
• 1d913c6453 xattrs/backup: read source metadata through a held fd, not a path Andrew Tridgell 2026-06-27 16:55:08 +10:00
• 6802f5cb87 rsync: pin cross-tree fake-super metadata writes to a confined fd Andrew Tridgell 2026-06-27 16:17:51 +10:00
• d75b493638 daemon: make "insecure links = yes" fully restore 3.2.7 symlink following Andrew Tridgell 2026-06-27 13:28:48 +10:00
• 5e74081604 syscall: drop the dead name_is_dir arg from abspath_excluded_by_module Andrew Tridgell 2026-06-26 21:22:41 +10:00
• 34166963ab io, main: make the SIGUSR2 handler async-signal-safe Andrew Tridgell 2026-06-26 19:33:55 +10:00
• 399c5041a4 hashtable, flist: fix integer overflows in size computations Andrew Tridgell 2026-06-26 18:53:37 +10:00
• ec256152b7 copy_file: confine an absolute operator source via the ownership walk Andrew Tridgell 2026-06-26 16:34:59 +10:00
• 1d775c8c89 io: reject a non-positive MSG_IO_TIMEOUT from the peer Andrew Tridgell 2026-06-26 16:34:59 +10:00
• 433ed0e1db confine the remaining cross-tree operator-path syscalls Andrew Tridgell 2026-06-26 16:10:34 +10:00
• ea9e707b46 backup: confine cross-tree operator-path metadata via a pinned fd Andrew Tridgell 2026-06-26 13:18:31 +10:00
• 4e9285b084 daemon: insecure links opt-out restores legacy symlink following on the receiver Andrew Tridgell 2026-06-25 19:04:09 +10:00
• 08d2d7b425 flist/xattrs/generator/uidlist/clientserver: plug audit-reported leaks Andrew Tridgell 2026-06-24 07:29:46 +10:00
• cb7373c952 access: fail closed when a hosts-deny token can't be resolved Andrew Tridgell 2026-06-24 07:29:46 +10:00
• 5d84ed23c3 util1: declare insecure_links extern for the change_dir opt-out (backport adapt) Andrew Tridgell 2026-06-27 18:23:25 +10:00
• 8cbfd8a434 xattrs/backup: read source metadata through a held fd, not a path Andrew Tridgell 2026-06-27 16:55:08 +10:00
• 8778f3f9e3 rsync: pin cross-tree fake-super metadata writes to a confined fd Andrew Tridgell 2026-06-27 16:17:51 +10:00
• 5a15ea8fda daemon: make "insecure links = yes" fully restore 3.2.7 symlink following Andrew Tridgell 2026-06-27 13:28:48 +10:00
• b1b3ad45e5 syscall: drop the dead name_is_dir arg from abspath_excluded_by_module Andrew Tridgell 2026-06-26 21:22:41 +10:00
• b3e558d1ba io, main: make the SIGUSR2 handler async-signal-safe Andrew Tridgell 2026-06-26 19:33:55 +10:00
• 13d023e617 hashtable, flist: fix integer overflows in size computations Andrew Tridgell 2026-06-26 18:53:37 +10:00
• f66eb4ca9a copy_file: confine an absolute operator source via the ownership walk Andrew Tridgell 2026-06-26 16:34:59 +10:00
• 63fbf31890 io: reject a non-positive MSG_IO_TIMEOUT from the peer Andrew Tridgell 2026-06-26 16:34:59 +10:00
• cf4cffcccb confine the remaining cross-tree operator-path syscalls Andrew Tridgell 2026-06-26 16:10:34 +10:00
• a802ffa58b backup: confine cross-tree operator-path metadata via a pinned fd Andrew Tridgell 2026-06-26 13:18:31 +10:00
• b98c09a7b5 daemon: insecure links opt-out restores legacy symlink following on the receiver Andrew Tridgell 2026-06-25 19:04:09 +10:00
• cf0c361988 flist/xattrs/generator/uidlist/clientserver: plug audit-reported leaks Andrew Tridgell 2026-06-24 07:29:46 +10:00
• bca78c12f8 access: fail closed when a hosts-deny token can't be resolved Andrew Tridgell 2026-06-24 07:29:46 +10:00
• 78655544c5 syscall: do_mknod_at must mkfifoat for an operator-path FIFO on non-Linux Andrew Tridgell 2026-06-23 10:05:37 +10:00
• ea7fc12b9c syscall: do_mknod_at must mkfifoat for an operator-path FIFO on non-Linux Andrew Tridgell 2026-06-23 10:05:37 +10:00
• 8bd74c5fd2 io/xattrs/rsync-ssl: EOF-sentinel guard, xattr ndx guard, gnutls CA refusal Andrew TridgellandGreg Kroah-Hartman 2026-06-22 09:16:41 +10:00
• b3119ce493 options/token: bound the -v repetition, output level, and suffix token Andrew TridgellandGreg Kroah-Hartman 2026-06-22 09:16:41 +10:00
• 21c000f64d compat: assign metadata ndx after batch flags; pick own preferred name Andrew TridgellandGreg Kroah-Hartman 2026-06-22 09:16:41 +10:00
• 8e03f94076 generator: fix off-by-one length in read_delay_line() Andrew TridgellandGreg Kroah-Hartman 2026-06-22 09:16:41 +10:00
• 0e45e015e4 hlink/main: guard the F_SUM checksum-slot lifetime Andrew TridgellandGreg Kroah-Hartman 2026-06-22 09:16:41 +10:00
• bb62874163 flist/receiver: zero/empty the device & symlink extra slots Andrew TridgellandGreg Kroah-Hartman 2026-06-22 09:16:41 +10:00
• 4da4a7ce1e io/xattrs/rsync-ssl: EOF-sentinel guard, xattr ndx guard, gnutls CA refusal Andrew TridgellandGreg Kroah-Hartman 2026-06-22 09:16:41 +10:00
• 8190f47173 options/token: bound the -v repetition, output level, and suffix token Andrew TridgellandGreg Kroah-Hartman 2026-06-22 09:16:41 +10:00
• cd82ef3782 compat: assign metadata ndx after batch flags; pick own preferred name Andrew TridgellandGreg Kroah-Hartman 2026-06-22 09:16:41 +10:00
• 422fc5aff8 generator: fix off-by-one length in read_delay_line() Andrew TridgellandGreg Kroah-Hartman 2026-06-22 09:16:41 +10:00
• 69eef72ecb hlink/main: guard the F_SUM checksum-slot lifetime Andrew TridgellandGreg Kroah-Hartman 2026-06-22 09:16:41 +10:00
• 762d0be048 flist/receiver: zero/empty the device & symlink extra slots Andrew TridgellandGreg Kroah-Hartman 2026-06-22 09:16:41 +10:00
• 5832599916 main: raise the open-file soft limit so the resolver can walk deep paths Andrew Tridgell 2026-06-21 19:01:47 +10:00
• c09cb8f43e main: raise the open-file soft limit so the resolver can walk deep paths Andrew Tridgell 2026-06-21 19:01:47 +10:00
• 17576944f4 docs: NEWS, README and man pages for the 3.5.0 security backport Andrew Tridgell 2026-06-21 16:35:17 +10:00
• 2a2ccaa1bf batch/rsync-ssl: quote replay-script args and harden rsync-ssl Andrew Tridgell 2026-06-21 16:35:17 +10:00
• 6d6699ed7f socket: reject control bytes in the proxy CONNECT host Andrew Tridgell 2026-06-21 16:35:17 +10:00
• 3cc137c16c daemon: treat exclude=/filter as a name filter, not a symlink boundary Andrew Tridgell 2026-06-21 16:35:17 +10:00
• 3ee00e0087 confine operator- and peer-supplied paths to the served module Andrew Tridgell 2026-06-21 16:35:16 +10:00
• 3dddbde5ff syscall/util1: race-safe path resolution via a held dirfd-stack resolver Andrew Tridgell 2026-06-21 16:35:16 +10:00
• 4a7594a96f docs: NEWS, README and man pages for the 3.5.0 security backport Andrew Tridgell 2026-06-21 16:33:56 +10:00
• 3e23f86857 batch/rsync-ssl: quote replay-script args and harden rsync-ssl Andrew Tridgell 2026-06-21 16:33:56 +10:00
• fa0419b2e2 socket: reject control bytes in the proxy CONNECT host Andrew Tridgell 2026-06-21 16:33:56 +10:00
• ad2ccf95ce daemon: treat exclude=/filter as a name filter, not a symlink boundary Andrew Tridgell 2026-06-21 16:33:56 +10:00
• a74cce06a7 confine operator- and peer-supplied paths to the served module Andrew Tridgell 2026-06-21 16:33:56 +10:00
• 49bb61b8eb syscall/util1: race-safe path resolution via a held dirfd-stack resolver Andrew Tridgell 2026-06-21 16:33:56 +10:00
• f5fa55672d Fix Solaris xattr retry handling AlphaGlider25 2026-06-19 03:30:48 +02:00
• 5553271274 ci: run scan-build on pinned clang-18 + latest clang (informational) Andrew Tridgell 2026-06-16 07:54:07 +10:00
• 3f5884a3bb scan-build: close a test-helper FILE* leak Andrew Tridgell 2026-06-16 06:43:20 +10:00
• 4e67f87479 scan-build: fix resource leaks on error paths Andrew Tridgell 2026-06-12 10:53:10 +10:00
• 8118744f2a scan-build: drop dead assignments Andrew Tridgell 2026-06-16 06:43:20 +10:00
• 412cddf6be scan-build: zero-init buffers the analyzer can't prove are written Andrew Tridgell 2026-06-12 10:53:01 +10:00