rsync (3.4.1+ds1-7) unstable; urgency=medium

  * Team upload.

  [ Arnaud Rebillout ]
  * d/control: Switch back to python3-cmarkgfm for all architectures

  [ Matheus Polkorny ]
  * d/p/CVE-2025-10158.patch: Import upstream patch to fix CVE-2025-10158

    A malicious client acting as the receiver of an rsync file transfer
    can trigger an out of bounds read of a heap based buffer,
    via a negative array index. (Closes: #1121442)

 -- Matheus Polkorny <mpolkorny@gmail.com>  Thu, 27 Nov 2025 21:01:55 -0300

rsync (3.4.1+ds1-6) unstable; urgency=medium

  [ Samuel Henrique ]
  * d/p/reproducible-build.patch: New patch to fix reproducible builds, thanks
    to lamby (closes: #1093201)
  * gcc_15.patch: New patch to support building with GCC 15 (closes: #1097811)

  [ Arnaud Rebillout ]
  * d/tests/remote-tests: start the SSH service if ever it's not up

  [ Alex ]
  * d/tests/local-tests: remove test skip

 -- Samuel Henrique <samueloph@debian.org>  Wed, 22 Oct 2025 19:22:21 +0100

rsync (3.4.1+ds1-5) unstable; urgency=medium

  * Team upload.
  * d/tests/local-tests: beautify test script
  * d/tests: run rsync tests over ssh
  * d/tests/local-tests: add test for --exclude flag
  * d/copyright: add contributor

 -- Alex <alex@puer-robustus.eu>  Sat, 26 Jul 2025 11:26:07 +0200

rsync (3.4.1+ds1-5~exp1) experimental; urgency=medium

  * Team upload.
  * d/tests: add Debian-specific local rsync tests

 -- Alex <alex@puer-robustus.eu>  Thu, 03 Jul 2025 22:28:36 +0200

rsync (3.4.1+ds1-4) unstable; urgency=medium

  * Upload to unstable

 -- Samuel Henrique <samueloph@debian.org>  Mon, 09 Jun 2025 19:41:23 +0100

rsync (3.4.1+ds1-4~exp2) experimental; urgency=medium

  * Team upload.
  * d/control: Add acl and attr packages to Build-Depends
  * d/tests: Add "upstream-tests-as-root" test with needs-root restriction

 -- Alex <alex@puer-robustus.eu>  Fri, 06 Jun 2025 16:40:59 +0200

rsync (3.4.1+ds1-4~exp1) experimental; urgency=medium

  * Team upload.
  * docs(debian/copyright): consistently point to GNU licenses website
  * d/tests: add superficial test for "rsync -h"

 -- Alex <alex@puer-robustus.eu>  Wed, 04 Jun 2025 21:46:47 +0200

rsync (3.4.1+ds1-3) unstable; urgency=medium

  * Team upload.
  * python3-cmarkgfm is currently broken for hppa architecture

 -- Arnaud Rebillout <arnaudr@kali.org>  Fri, 07 Mar 2025 17:59:15 +0700

rsync (3.4.1+ds1-2) unstable; urgency=medium

  * Team upload.
  * Update skip_devices_test patch to be non-linux
  * Add patch to fix flaky hardlinks test
  * d/watch: Drop filenamemangle and uversionmangle, simplify dversionmangle

 -- Arnaud Rebillout <arnaudr@kali.org>  Thu, 06 Mar 2025 14:10:57 +0700

rsync (3.4.1+ds1-1) unstable; urgency=medium

  * Team upload.

  [ Samuel Henrique ]
  * Swap Maintainer with Uploaders, so samueloph can get email notifications

  [ Arnaud Rebillout ]
  * d/watch: Adjust url to point to the src dir with all the releases
  * Update upstream signing key, metadata and email address
  * New upstream version 3.4.1+ds1 (Closes: #1093081)
  * Drop patches applied upstream
  * Update shebang patch

 -- Arnaud Rebillout <arnaudr@kali.org>  Wed, 05 Mar 2025 09:02:19 +0700

rsync (3.3.0+ds1-4) unstable; urgency=critical

  [ Salvatore Bonaccorso ]
  * Fix FLAG_GOT_DIR_FLIST collission with FLAG_HLINKED
    (Closes: #1093089, #1093052)

  [ Samuel Henrique ]
  * d/p/Fix_use-after-free_in_generator: New patch to fix UAF

 -- Samuel Henrique <samueloph@debian.org>  Wed, 15 Jan 2025 18:34:49 +0000

rsync (3.3.0+ds1-3) unstable; urgency=critical

  * Import upstream patches for CVE-2024-12084, CVE-2024-12085,
    CVE-2024-12086, CVE-2024-12087, CVE-2024-12088, CVE-2024-12747
     - d/p/rsync-upstream-CVE-patches-v3/CVE-2024-12084
       ~ 0001-Some-checksum-buffer-fixes.patch
       ~ 0002-Another-cast-when-multiplying-integers.patch
     - d/p/rsync-upstream-CVE-patches-v3/CVE-2024-12085
       ~ 0001-prevent-information-leak-off-the-stack.patch
     - d/p/rsync-upstream-CVE-patches-v3/CVE-2024-12086
       ~ 0001-refuse-fuzzy-options-when-fuzzy-not-selected.patch
       ~ 0002-added-secure_relative_open.patch
       ~ 0003-receiver-use-secure_relative_open-for-basis-file.patch
       ~ 0004-disallow-.-elements-in-relpath-for-secure_relative_o.patch
     - d/p/rsync-upstream-CVE-patches-v3/CVE-2024-12087
       ~ 0001-Refuse-a-duplicate-dirlist.patch
       ~ 0002-range-check-dir_ndx-before-use.patch
     - d/p/rsync-upstream-CVE-patches-v3/CVE-2024-12088
       ~ 0001-make-safe-links-stricter.patch
     - d/p/rsync-upstream-CVE-patches-v3/CVE-2024-12747
       ~ 0001-fixed-symlink-race-condition-in-sender.patch
     - d/p/rsync-upstream-CVE-patches-v3/version_update
       ~ 0001-raise-protocol-version-to-32.patch
       ~ 0002-change-version-to-3.4.0.patch
       ~ 0003-update-NEWS-for-3.4.0.patch

 -- Samuel Henrique <samueloph@debian.org>  Sun, 12 Jan 2025 15:40:14 +0000

rsync (3.3.0+ds1-2) unstable; urgency=medium

  * d/watch: Set repacksuffix to +ds1 to fix salsa CI
  * d/p/configure_ac...: New patch to fix IPv6 support, thanks to Simon
    Ruderich for the bug report (closes: #1090328)

 -- Samuel Henrique <samueloph@debian.org>  Tue, 17 Dec 2024 18:56:13 +0000

rsync (3.3.0+ds1-1) unstable; urgency=medium

  * Team upload.

  [ Samuel Henrique ]
  * New upstream version 3.3.0+ds
    - Repack to remove the zlib bundled library

  [ Matheus Polkorny ]
  * New upstream version 3.3.0+ds1
    - Repack to remove the popt bundled library
  * d/copyright: Update to comply with 1.0 format and exclude popt/*
  * d/gbp.conf: Remove export-dir configuration
  * d/rules: fix build failure due to missing zlib/dummy.in and popt/dummy.in
  * d/t/upstream-tests: Run d/rules override_dh_auto_configure during setup
  * d/watch: add +ds suffix to version

 -- Matheus Polkorny <mpolkorny@gmail.com>  Sat, 07 Dec 2024 20:54:11 -0300

rsync (3.3.0-1) unstable; urgency=medium

  [ Aquila Macedo Costa ]
  * d/control: Bump Standards-Version to 4.6.2

  [ Samuel Henrique ]
  * New upstream version 3.3.0 (closes: #1068630)
  * Bump Standards-Version to 4.7.0
  * Update patches
  * d/patches: Drop merged patches
  * d/control: Drop dependency on lsb-base
  * d/rsync.lintian-overrides: Update overrides

 -- Samuel Henrique <samueloph@debian.org>  Fri, 12 Apr 2024 00:28:29 +0100

rsync (3.2.7-1) unstable; urgency=medium

  [ Juri Grabowski ]
  * New upstream version 3.2.7
  * Remove patches included in new release

  [ Helmut Grohne ]
  * Fix FTCBFS: Use native instances for python build depends
    (closes: #1022988).

  [ Samuel Henrique ]
  * d/rsync.lintian-overrides: Update findings as per lintian changes
  * d/patches: Add two upstream patches to fix issues post 3.2.7 release:
    - trust_the_sender_on_a_local_transfer.patch
    - avoid_quoting_of_tilde_when_its_a_destination_arg.patch

 -- Samuel Henrique <samueloph@debian.org>  Sun, 18 Dec 2022 14:10:54 +0000

rsync (3.2.6-4) unstable; urgency=medium

  * Upload to unstable
    - d/patches:
      ~ fix_files_from.patch: Upstream patch to address the files-from issue.
      ~ fix_relative.patch: Upstream patch to fix exclusion of /. with
        --relative.
      ~ fix_remote_filter_rules_validation.patch: Upstream patch to fix bug
        with validating remote filter rules.
    (closes: #1018296, #1019561)

 -- Samuel Henrique <samueloph@debian.org>  Wed, 21 Sep 2022 18:58:57 +0100

rsync (3.2.6-3) experimental; urgency=medium

  * d/patches:
    - fix_files_from.patch: Upstream patch to address the files-from issue,
      likely to also be related to #1019561 and #1018296
    - fix_relative.patch: Upstream patch to fix exclusion of /. with --relative

 -- Samuel Henrique <samueloph@debian.org>  Wed, 14 Sep 2022 19:25:19 +0100

rsync (3.2.6-2) experimental; urgency=medium

  * d/p/fix_remote_filter_rules_validation.patch: New upstream patch to try to
    fix #1019561 and #1018296

 -- Samuel Henrique <samueloph@debian.org>  Tue, 13 Sep 2022 20:55:01 +0100

rsync (3.2.6-1) unstable; urgency=medium

  * New upstream version 3.2.6
    - Added a safety check that prevents the sender from removing destination
      files when a local copy using --remove-source-files has some files that
      are shared between the sending & receiving hierarchies, including the
      case where the source dir & destination dir are identical
      (closes: #1016102)
  * Bump Standards-Version to 4.6.1

 -- Samuel Henrique <samueloph@debian.org>  Sat, 10 Sep 2022 20:03:51 +0100

rsync (3.2.5-1) unstable; urgency=medium

  * New upstream version 3.2.5
    - Added some file-list safety checking that helps to ensure that a rogue
      sending rsync can't add unrequested top-level names and/or include
      recursive names that should have been excluded by the sender. These
      extra safety checks only require the receiver rsync to be updated. When
      dealing with an untrusted sending host, it is safest to copy into a
      dedicated destination directory for the remote content (i.e. don't copy
      into a destination directory that contains files that aren't from the
      remote host unless you trust the remote host)
      (closes: #1016543, CVE-2022-29154).
    - The build date that goes into the manpages is now based on the
      developer's release date, not on the build's local-timezone
      interpretation of the date (closes: #1009981)

 -- Samuel Henrique <samueloph@debian.org>  Tue, 16 Aug 2022 11:03:48 +0100

rsync (3.2.4-1) unstable; urgency=medium

  [ Samuel Henrique ]
  * New upstream version 3.2.4
    - Work around a glibc bug where lchmod() breaks in a chroot w/o /proc
      mounted (closes: #995046).
    - rsync.1: remove prepended backticks which broke --stop-after and
      --stop-at formatting (closes: #1007990).
  * Ship new python-based rrsync with --with-rrsync:
    - rrsync was previouysly written in bash.
    - A manpage is now shipped for rrsync.
    - python3 and python3-cmarkgfm are new B-Ds since they're needed
      to generate the manpage.
  * d/control:
    - Add version requirement for some libxxhash-dev and libzstd-dev as
      per upstream docs.
    - Add python3-braceexpand to Suggests as it can be used by rrsync.
  * d/rsync.install: cull_options has been renamed to cull-options.
  * d/patches:
    - Refresh the following patches:
      ~ disable_reconfigure_req.diff;
      ~ perl_shebang.patch;
      ~ skip_devices_test.patch;
    - Drop the following patches, applied upstream now:
      ~ CVE-2020-14387.patch;
      ~ copy-devices.diff;
      ~ fix_delay_updates.patch;
      ~ fix_ftcbfs_configure.patch;
      ~ fix_mkpath.patch;
      ~ fix_rsync-ssl_RSYNC_SSL_CERT_feature.patch;
      ~ fix_sparse_inplace.patch;
      ~ manpage_upstream_fixes.patch;
      ~ update_rrsync_options.patch;
      ~ workaround_glibc_lchmod_regression.patch;

  [ Sergio Durigan Junior ]
  * d/rules: Disable ASM optimizations when building.
    This is not needed because the only ASM-optimized implementation
    available is the MD5 hash, which is actually a no-op because we link
    against OpenSSL and rsync ends up using that library's implementation
    of the hash.  Even then, the final binary ends up with the
    ASM-optimized version included, which makes it become
    CET-incompatible.
    Thanks to Dimitri John Ledkov <xnox@ubuntu.com>

 -- Samuel Henrique <samueloph@debian.org>  Mon, 18 Apr 2022 14:44:44 +0100

rsync (3.2.3-8) unstable; urgency=medium

  * debian/patches:
    - manpage_upstream_fixes.patch: Import multiple upstream patches to fix
      manpage.
    - copy-devices.diff: Add missing manpage changes to patch
    - CVE-2020-14387.patch: Add Forwarded DEP3 field to point to upstream patch
    - fix_delay_updates.patch: Refresh patch
    - fix_mkpath.patch: New upstream patch to fix an edge case on --mkpath
    - fix_rsync-ssl_RSYNC_SSL_CERT_feature.patch: New upstream patch
    - fix_sparse_inplace.patch: New upstream patch to fix --sparse + --inplace
      options
    - update_rrsync_options.patch: New upstream patch to update rrsync options

 -- Samuel Henrique <samueloph@debian.org>  Sat, 25 Sep 2021 17:38:16 +0100

rsync (3.2.3-7) unstable; urgency=medium

  * Bump Standards-Version to 4.6.0
  * d/p/workaround_glibc_lchmod_regression.patch: New patch from upstream
    (closes: #994543)
  * debian/rsync.NEWS: Fix typo in last entry

 -- Samuel Henrique <samueloph@debian.org>  Sat, 18 Sep 2021 00:25:13 +0100

rsync (3.2.3-6) unstable; urgency=medium

  * d/t/upstream-tests: Suppress stderr warnings from the build process

 -- Samuel Henrique <samueloph@debian.org>  Sun, 12 Sep 2021 18:22:57 +0100

rsync (3.2.3-5) unstable; urgency=medium

  [ 刘建强 ]
  * Set the rsync.service not to start automatically after installation,
    the rsyncd.conf configuration file needs to be configured by the user
    before the service can start

  [ Samuel Henrique ]
  * Re-add upstream patch for --copy-devices, the --write-devices option is
    not fully equivalent (closes: #992215)
  * d/rsync.docs: Add NEWS.md file (previously named NEWS) (closes: #993697)
  * d/p/fix_delay_updates.patch: New patch from upstream (closes: #992231)

 -- Samuel Henrique <samueloph@debian.org>  Sun, 12 Sep 2021 17:25:37 +0100

rsync (3.2.3-4) unstable; urgency=medium

  [ Helmut Grohne ]
  * d/p/fix_ftcbfs_configure.patch: New patch to fix FTCBFS (closes: #971285)

  [ Samuel Henrique ]
  * Bump Standards-Version to 4.5.1

 -- Samuel Henrique <samueloph@debian.org>  Tue, 02 Feb 2021 23:08:54 +0000

rsync (3.2.3-3) unstable; urgency=high

  * d/p/CVE-2020-14387.patch: New patch to fix an openssl related CVE
    (closes: #969530, CVE-2020-14387)

 -- Samuel Henrique <samueloph@debian.org>  Sat, 19 Dec 2020 12:48:33 +0000

rsync (3.2.3-2) unstable; urgency=medium

  [ Sergio Durigan Junior ]
  * Make the autopkgtests cross-friendly.
    Thanks to Steve Langasek <steve.langasek@ubuntu.com>

 -- Samuel Henrique <samueloph@debian.org>  Wed, 26 Aug 2020 21:23:57 +0100

rsync (3.2.3-1) unstable; urgency=medium

  * New upstream version 3.2.3
  * debian/patches:
    - time-limit.diff: Remove patch, applied upstream now
    - disable_reconfigure_req.diff: Refresh patch and dep3 headers
    - perl_shebang.patch: Update patch
    - fix_bwlimit_0.patch: Remove patch, applied upstream

 -- Samuel Henrique <samueloph@debian.org>  Sun, 09 Aug 2020 13:41:10 +0100

rsync (3.2.2-2) unstable; urgency=medium

  * d/p/fix_bwlimit_0.patch: New upstream patch to fix bwlimit=0
    (closes: #964587)

 -- Samuel Henrique <samueloph@debian.org>  Fri, 10 Jul 2020 18:35:21 +0100

rsync (3.2.2-1) unstable; urgency=medium

  * New upstream version 3.2.2
  * d/rsync.install: Install rsync-no-vanished (closes: #353697)

 -- Samuel Henrique <samueloph@debian.org>  Mon, 06 Jul 2020 19:01:52 +0100

rsync (3.2.1-1) unstable; urgency=medium

  * New upstream version 3.2.1
  * Remove patches applied upstream:
    - backup-dir-implies-backup.diff
    - manpage-compress-level.diff
    - systemd-unit.diff
  * d/patches:
    - logdir.diff: Remove patch since logdir which comes with file is the
      default one
    - time-limit.diff: Update patch from upstream
  * d/u/signing-key.asc: Fix signing key

 -- Samuel Henrique <samueloph@debian.org>  Tue, 23 Jun 2020 18:16:52 +0100

rsync (3.2.0-1) unstable; urgency=low

  * New upstream version 3.2.0
  * Bump DH to 13
  * Bump Standards Version to 4.5.0
  * Stop using bundled zlib in favor of dynamic linking to zlib1g-dev
  * Install manpages from build directory instead of sources
  * d/control:
    - Add Suggests on python3 for the script git-set-file-times under /usr/share
    - Remove unneeded build-dependency libattr1-dev (closes: #953927)
    - Update Build-Deps, remove yodl and add new libs
  * d/copyright: Update file to add the new openssl exemption to the gpl3
    license
  * d/u/metadata: Add Bug-Submit and Bug-Database fields
  * d/upstream/signining-key: Change format from pgp to armored .asc
  * d/rsync.NEWS: Add information about two parameter name changes
  * d/rsync.manpages: Add new manpage rsync-ssl.1
  * d/s/include-binaries: Remove file now that gpg key is in armored mode in asc
    file
  * d/patches:
    - skip_devices_test.patch: New patch to skip devices test because it
      fails on kfreebsd and hurd
    - perl_shebang.patch: New patch to remove usage of env from perl shebang
    - disable_reconfigure_req.diff: Refresh patch
    - backup-dir-implies-backup.diff: Update patch
    - manpage-compress-level.diff: Update patch
    - systemd-unit.diff: Update patch, only adds list of manpages now
    - time-limit.diff: Update patch from upstream
    - Remove patches applied upstream:
      ~ CVE-2016-9840.patch
      ~ CVE-2016-9841.patch
      ~ CVE-2016-9842.patch
      ~ CVE-2016-9843.patch
      ~ Two-spelling-mistakes-in-rsync.yo.diff
      ~ prealloc-fix.diff
      ~ ssh-6-option.diff
      ~ copy-devices.diff: --copy-devices is now --write-devices
      ~ noatime.diff: --noatime is now --open-noatime

  [ Debian Janitor ]
  * Set upstream metadata fields: Repository.

 -- Samuel Henrique <samueloph@debian.org>  Sat, 20 Jun 2020 18:05:57 +0100

rsync (3.1.3-8) unstable; urgency=medium

  * Link rrsync in /usr/bin/
  * Run upstream tests at build time:
    -  d/rules: Stop overriding dh_auto_test
    -  d/p/noatime.diff: Change patch to address test failure
  * Run upstream tests on autopkgtest
  * d/rsync.install: Move scripts to /usr/share/ instead of usr/share/doc/
    (closes: #911321):
    - rsync.NEWS: Create file and tell about scripts new location
  * d/salsa-ci.yml: Skip repro tests for now
  * d/p/noatime.diff:
    - Fix DEP-3 headers
    - Fix typo

 -- Samuel Henrique <samueloph@debian.org>  Tue, 15 Oct 2019 01:04:36 +0100

rsync (3.1.3-7) unstable; urgency=low

  * Bump Standards-Version to 4.4.1
  * Add salsa-ci.yml
  * Convert packaging to use debhelper:
    - Automatically build dbgsym package (closes: #920052)
    - Use quilt for patches:
      ~ Refresh all patches
      ~ Remove lintian override for lack of patch series file
      ~ d/rules: Stop applying patches here, use quilt instead
    - Use debhelper instead of maint scripts to deal with .init file
      ~ Create symlink for .service file in debian/ because DH is not
        finding it
    - d/control:
      ~ Add Rules-Requires-Root: no
      ~ Add '${misc:Depends}' Dependency
      ~ Add Pre-Depends '${misc:Pre-Depends}'
      ~ Add debhelper-compat build-dependency
      ~ Remove build-dependency on autotools, not needed with debelpher
    - d/rules:
      ~ Add export DEB_BUILD_MAINT_OPTIONS = hardening=+all
      ~ Use parameter --with-included-zlib=yes on configure
      ~ override_dh_auto_test: don't run make test
    - d/rsync.examples: Create file and install same files as before moving
      to DH
    - d/rsync.install: Create file and install same files as before moving
      to DH
    - d/p/disable_reconfigure_req.diff: Disable reconfigure check at Makefile
  * d/control:
    - Remove dependency lsb-base version requirement, required version was
      released in 2008
    - Remove breaks duplicity, breakable version was superseded in 2011
    - Remove base-files dependency as it is an essential package and version
      required was released in 2007
  * d/rsync.default: Fix name of file
  * d/rsync.lintian-overrides:
    - Fix name of file
    - Remove unused override

 -- Samuel Henrique <samueloph@debian.org>  Sun, 06 Oct 2019 16:47:47 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog rsync`.
