CVS commit: pkgsrc/net/rsync

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Thu Aug 13 06:17:23 UTC 2026

Modified Files:
        pkgsrc/net/rsync: Makefile distinfo

Log Message:
rsync: update to 3.5.0.

This release fixes 33 security issues found during a focused audit
of rsync's path handling and daemon protocol, a companion
daemon-protocol fuzzing pass, and reports from external researchers
-⁠-⁠ plus several robustness hardenings. CVE IDs were assigned by
VulnCheck (CNA); the precise "introduced in" version ranges accompany
each advisory, and many are much narrower than "everything before
3.5.0". Every fix ships with a regression test in the test suite
that fails on the unfixed tree.

Full details at https://download.samba.org/pub/rsync/NEWS#3.5.0


To generate a diff of this commit:
cvs rdiff -u -r1.134 -r1.135 pkgsrc/net/rsync/Makefile
cvs rdiff -u -r1.67 -r1.68 pkgsrc/net/rsync/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/rsync/Makefile
diff -u pkgsrc/net/rsync/Makefile:1.134 pkgsrc/net/rsync/Makefile:1.135
--- pkgsrc/net/rsync/Makefile:1.134     Mon Jun  8 05:45:27 2026
+++ pkgsrc/net/rsync/Makefile   Thu Aug 13 06:17:23 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.134 2026/06/08 05:45:27 wiz Exp $
+# $NetBSD: Makefile,v 1.135 2026/08/13 06:17:23 wiz Exp $
 
-DISTNAME=      rsync-3.4.4
+DISTNAME=      rsync-3.5.0
 CATEGORIES=    net
 MASTER_SITES=  http://rsync.samba.org/ftp/rsync/
 MASTER_SITES+= http://rsync.samba.org/ftp/rsync/old-versions/

Index: pkgsrc/net/rsync/distinfo
diff -u pkgsrc/net/rsync/distinfo:1.67 pkgsrc/net/rsync/distinfo:1.68
--- pkgsrc/net/rsync/distinfo:1.67      Mon Jun  8 05:45:27 2026
+++ pkgsrc/net/rsync/distinfo   Thu Aug 13 06:17:23 2026
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.67 2026/06/08 05:45:27 wiz Exp $
+$NetBSD: distinfo,v 1.68 2026/08/13 06:17:23 wiz Exp $
 
-BLAKE2s (rsync-3.4.4.tar.gz) = 2a7620bbb021a607d06ae380496e4320fe9328ca750759a2a343ff262cf331ed
-SHA512 (rsync-3.4.4.tar.gz) = cf9a838b1f019b70fd67fa2c293f267be3f24e579c2ea33177ec7afc502c97ce0b613ff0854088c0eb28acd14ee0a75706ae8445115cef4669bd586c505d8453
-Size (rsync-3.4.4.tar.gz) = 1223040 bytes
+BLAKE2s (rsync-3.5.0.tar.gz) = cbeec5e81787e407a26e9a9e18c95d4e75344e0ce86c3e9fef12b127b49ee808
+SHA512 (rsync-3.5.0.tar.gz) = 6c5bada017e4e5f5b451058e2d1863174a1807796525ef4188c1f40358ccbdd36604fd2275dceb1cc6a95ac04da211501553353026c48594c5a79eedb27ce68d
+Size (rsync-3.5.0.tar.gz) = 1892222 bytes
 SHA1 (patch-Makefile.in) = 701577726bdb3b91c97bba47c6be331505630a72
 SHA1 (patch-acls.c) = 9be60c0c1abedc961fa95bba2bb23d802a09bc62