CVS commit: pkgsrc/net/rsync

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Wed Nov  4 16:56:24 UTC 2026

Modified Files:
        pkgsrc/net/rsync: Makefile.common distinfo

Log Message:
rsync: update to 3.5.2.

# NEWS for rsync 3.5.2 (4 Nov 2026)

## Changes in this version:

### BUG FIXES:
- Fixed interrupted `--append` and `--inplace` transfers writing the final
  256 KiB buffer twice. An interrupted destination now remains a clean prefix
  which the next transfer can resume or repair.
- Fixed uploads through `rrsync` when the destination file already exists.
  Existing files are now reached beneath a pinned parent directory instead of
  being passed as an unwritable `/proc/self/fd/N` destination.
- Fixed poor matching performance on large sparse and repeated-block files
  when duplicate checksum chains exhausted the search limit. Valid basis
  blocks are no longer hidden behind duplicate entries.
- Bounded strong-checksum work when a malicious receiver supplies weak
  checksums that collide with consecutive rolling windows
  (CVE-2026-119741).
- Prevented the `--inplace` matcher from advancing its aligned basis index
  beyond the available checksum entries. This avoids signed overflow on large
  source files when the peer supplies a small block count.
- Recovered from failed hard-link creation without aborting or hanging the
  generator. Remaining members fall back to a fresh hard-link group when the
  original destination inode cannot accept another link.
- Prevented an out-of-bounds write while invalidating a sender checksum after
  a file read error when the negotiated checksum length is zero.
- Fixed a daemon receiver stack overflow when queued deletion output reached
  `--max-alloc`. Quiet daemon transfers no longer queue deletion messages
  unless the client requested them.
- Fixed a `--files-from` pull from a subdirectory of a daemon module, which
  read each listed file from the module root instead.  It could send, and with
  `--remove-source-files` delete, a same-named file the module's filter
  excludes.
- Fixed password files whose first line is empty. The parser no longer skips
  the empty line and uses a later password.
- Escaped terminal control characters in filenames and diagnostics written to
  standard output, standard error and log files while preserving printable
  text in the active locale.
- Preserved Cygwin and MSYS2 UNC roots during ownership-checked path walks.
- Restored daemon startup from accepted named Unix sockets on standard input,
  including filesystem and Linux abstract sockets used for socket activation.
  Unnamed local socket pairs remain non-daemon channels.
- Fixed forward-DNS hostname entries in daemon `hosts allow` and `hosts deny`
  lists for IPv6 peers. Address comparison is now binary and family-aware.
- Preserved Unix symlink permissions on systems which require `fchmodat()` to
  change the mode of a symlink rather than its target.
- Restored builds on systems without `O_CLOEXEC` or `O_DIRECTORY`, including
  Solaris 10.

### ENHANCEMENTS:
- Added `--nice` to adjust CPU and I/O scheduling priorities for local and
  remote rsync processes. Daemon clients and rrsync cannot raise server-side
  priorities.
- Human-readable output now uses dynamic precision to show three significant
  digits and appends `i` to binary unit suffixes. `--progress` uses the same
  formatter for transfer rates and labels byte counts and rates with `B` and
  `B/s`. Example output includes `46.7M`, `48.8Mi`, `782,448B` and
  `113,295B/s`. File-list, created-directory and skipped-deletion counts also
  use thousands separators.
- Added `--delay-symlinks` to defer creating new and changed symlinks until
  other transferred files are in place. It implies `--no-inc-recursive` and
  requires protocol 29 or newer with support on the receiving side. It cannot
  be combined with `--remove-source-files`, `--hard-links`, `--compare-dest`,
  `--copy-dest` or `--link-dest`.


To generate a diff of this commit:
cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/rsync/Makefile.common
cvs rdiff -u -r1.69 -r1.70 pkgsrc/net/rsync/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/rsync/Makefile.common
diff -u pkgsrc/net/rsync/Makefile.common:1.3 pkgsrc/net/rsync/Makefile.common:1.4
--- pkgsrc/net/rsync/Makefile.common:1.3        Tue Sep 22 22:59:31 2026
+++ pkgsrc/net/rsync/Makefile.common    Wed Nov  4 16:56:24 2026
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.3 2026/09/22 22:59:31 kim Exp $
+# $NetBSD: Makefile.common,v 1.4 2026/11/04 16:56:24 wiz Exp $
 #
 # used by net/rsync/Makefile
 # used by net/rrsync/Makefile
 
-DISTNAME=      rsync-3.5.1
+DISTNAME=      rsync-3.5.2
 CATEGORIES=    net
 MASTER_SITES=  http://rsync.samba.org/ftp/rsync/
 MASTER_SITES+= http://rsync.samba.org/ftp/rsync/old-versions/

Index: pkgsrc/net/rsync/distinfo
diff -u pkgsrc/net/rsync/distinfo:1.69 pkgsrc/net/rsync/distinfo:1.70
--- pkgsrc/net/rsync/distinfo:1.69      Tue Sep 22 06:44:46 2026
+++ pkgsrc/net/rsync/distinfo   Wed Nov  4 16:56:24 2026
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.69 2026/09/22 06:44:46 adam Exp $
+$NetBSD: distinfo,v 1.70 2026/11/04 16:56:24 wiz Exp $
 
-BLAKE2s (rsync-3.5.1.tar.gz) = 4ae90d2b0fa382d6a7966aa8ce56dda09c636df58a477f93771827770ac87833
-SHA512 (rsync-3.5.1.tar.gz) = 76f3c60eb12bbde9dd0edfb35c2584526298efea8eace446cbfc11791a593e3716daae313ae6ea30598c03f6c30f38492a4248482351b807ba653a23c808a4aa
-Size (rsync-3.5.1.tar.gz) = 1932807 bytes
+BLAKE2s (rsync-3.5.2.tar.gz) = 93505151c66ae1cc16324f5a944bc5ad888c3bbdc63217b62e91b959c23a4707
+SHA512 (rsync-3.5.2.tar.gz) = 751bf76d759d101d2b3a8f800d7512df1973753e0438885e75d4bdbda842e9f2cf265616aaebd48a1a6740903444b29338e54c66c793c3f2c080eb08802f8c14
+Size (rsync-3.5.2.tar.gz) = 1977884 bytes
 SHA1 (patch-Makefile.in) = 701577726bdb3b91c97bba47c6be331505630a72
 SHA1 (patch-acls.c) = 9be60c0c1abedc961fa95bba2bb23d802a09bc62