patches - Re: new release 3.4.0 - critical security release

2025-01-18 Thread Madhu via rsync
* "rsync.project via rsync" : Wrote on Wed, 15 Jan 2025 09:34:10 +1100: > sorry about the prefix changes in rsync-patches. We're going to be dropping > the whole rsync-patches system soon anyway, as it really isn't working > well. It was supposed to be a staging area where users would test the >

Re: new release 3.4.0 - critical security release

2025-01-15 Thread Nelson H. F. Beebe via rsync
rsbecker@... asks: >> Is there a way I can get access to a machine 3.4.0 is failing to build on? >> Maybe a VM under VirtualBox? Or some cloud service? >> I don't have an ia64 QEMU does not support IA-64, so VMs are likely out. 20+ years ago, HP had an IA-64 emulator that sort of worked, but did

Re: new release 3.4.0 - critical security release

2025-01-15 Thread rsync.project via rsync
. > This problem is isolated to popt/findme > > > > *From:* rsync.project > *Sent:* January 15, 2025 2:11 PM > *To:* rsbec...@nexbridge.com > *Cc:* Perry Hutchison ; rsync@lists.samba.org > *Subject:* Re: new release 3.4.0 - critical security release > > > &g

RE: new release 3.4.0 - critical security release

2025-01-15 Thread Randall S. Becker via rsync
Hutchison ; rsync@lists.samba.org Subject: Re: new release 3.4.0 - critical security release Is there a way I can get access to a machine 3.4.0 is failing to build on? Maybe a VM under VirtualBox? Or some cloud service? I don't have an ia64 On Thu, 16 Jan 2025 at 01:20, mailto:

RE: new release 3.4.0 - critical security release

2025-01-15 Thread Randall S. Becker via rsync
Also, the patch I previously sent works correctly on x86, but not ia64. This problem is isolated to popt/findme From: rsync.project Sent: January 15, 2025 2:11 PM To: rsbec...@nexbridge.com Cc: Perry Hutchison ; rsync@lists.samba.org Subject: Re: new release 3.4.0 - critical security

Re: new release 3.4.0 - critical security release

2025-01-15 Thread rsync.project via rsync
Is there a way I can get access to a machine 3.4.0 is failing to build on? Maybe a VM under VirtualBox? Or some cloud service? I don't have an ia64 On Thu, 16 Jan 2025 at 01:20, wrote: > On January 14, 2025 11:20 PM, Perry Hutchison wrote: > >"Randall S. Becker via rsync" wrote: > > > >> FYI: I

RE: new release 3.4.0 - critical security release

2025-01-15 Thread Randall S. Becker via rsync
On January 14, 2025 11:20 PM, Perry Hutchison wrote: >"Randall S. Becker via rsync" wrote: > >> FYI: I think this is just missing #include "rsync.h" in popt/findme.c > >Structurally, this seems very odd. I thought popt was a generic argument handler, >which should not need to #include details of

RE: new release 3.4.0 - critical security release

2025-01-15 Thread Randall S. Becker via rsync
Building for NonStop x86 and ia64. What is VINCE and where do notifications go for that? From: rsync.project Sent: January 15, 2025 2:02 AM To: rsbec...@nexbridge.com Cc: rsync@lists.samba.org Subject: Re: new release 3.4.0 - critical security release I'd also note that the patche

Re: new release 3.4.0 - critical security release

2025-01-14 Thread rsync.project via rsync
> patch also. >> >> >> >> Thanks, >> >> Randall >> >> >> >> *From:* rsync *On Behalf Of *Randall S. >> Becker via rsync >> *Sent:* January 14, 2025 6:46 PM >> *To:* 'rsync.project' >> *Cc:* rsync@lists.

Re: new release 3.4.0 - critical security release

2025-01-14 Thread rsync.project via rsync
nc *On Behalf Of *Randall S. > Becker via rsync > *Sent:* January 14, 2025 6:46 PM > *To:* 'rsync.project' > *Cc:* rsync@lists.samba.org > *Subject:* RE: new release 3.4.0 - critical security release > > > > Here is my fix for the situation: > > > >

Re: new release 3.4.0 - critical security release

2025-01-14 Thread Perry Hutchison via rsync
"Randall S. Becker via rsync" wrote: > FYI: I think this is just missing #include "rsync.h" in popt/findme.c Structurally, this seems very odd. I thought popt was a generic argument handler, which should not need to #include details of the application that is using it. -- Please use reply-all

RE: new release 3.4.0 - critical security release

2025-01-14 Thread Randall S. Becker via rsync
FYI: I think this is just missing #include “rsync.h” in popt/findme.c From: rsbec...@nexbridge.com Sent: January 14, 2025 10:35 PM To: rsbec...@nexbridge.com; 'rsync.project' Cc: rsync@lists.samba.org Subject: RE: new release 3.4.0 - critical security release Another iss

RE: new release 3.4.0 - critical security release

2025-01-14 Thread Randall S. Becker via rsync
:46 PM To: 'rsync.project' Cc: rsync@lists.samba.org Subject: RE: new release 3.4.0 - critical security release Here is my fix for the situation: diff --git a/popt/findme.c b/popt/findme.c index ac4cbae..4fe8a18 100644 --- a/popt/findme.c +++ b/popt/findme.c @@ -25,12 +25,2

Re: new release 3.4.0 - critical security release

2025-01-14 Thread rsync.project via rsync
I don't have a Mac to test on. If you have a Mac maybe you could test and open a PR against rsync for the change? On Wed, 15 Jan 2025 at 10:12, Ryan Carsten Schmidt wrote: > On Jan 14, 2025, at 16:34, rsync.project wrote: > > > sorry about the prefix changes in rsync-patches. > > > No problem;

RE: new release 3.4.0 - critical security release

2025-01-14 Thread Randall S. Becker via rsync
ully ask that it be included ASAP. Thanks, Randall From: rsync On Behalf Of Randall S. Becker via rsync Sent: January 14, 2025 6:09 PM To: 'rsync.project' Cc: rsync@lists.samba.org Subject: RE: new release 3.4.0 - critical security release This happens on NonStop x86 and ia64. I h

Re: new release 3.4.0 - critical security release

2025-01-14 Thread Ryan Carsten Schmidt via rsync
On Jan 14, 2025, at 16:34, rsync.project wrote:sorry about the prefix changes in rsync-patches.No problem; those changes were easy to remove from the fileflags patch. We're going to be dropping the whole rsync-patches system soon anyway, as it really isn't working well. It was supposed to be a stag

RE: new release 3.4.0 - critical security release

2025-01-14 Thread Randall S. Becker via rsync
@lists.samba.org Subject: Re: new release 3.4.0 - critical security release the alloca comes from the new popt release. What system are you having an issue with? On Wed, 15 Jan 2025 at 07:16, mailto:rsbec...@nexbridge.com> > wrote: A new dependency was added since 3.3, alloca(), which

Re: new release 3.4.0 - critical security release

2025-01-14 Thread rsync.project via rsync
sorry about the prefix changes in rsync-patches. We're going to be dropping the whole rsync-patches system soon anyway, as it really isn't working well. It was supposed to be a staging area where users would test the patches before being considered for the main release, but we haven't really receiv

Re: new release 3.4.0 - critical security release

2025-01-14 Thread Ryan Carsten Schmidt via rsync
The patches within the rsync-patches-3.4.0.tar.gz archive seem to contain new unnecessary hunks that change the prefix from /usr to /usr/local. This was not the case in 3.3.0. I use the fileflags.diff patch in the MacPorts build of rsync, and with the 3.4.0 version of this patch, it does not b

Re: new release 3.4.0 - critical security release

2025-01-14 Thread rsync.project via rsync
the alloca comes from the new popt release. What system are you having an issue with? On Wed, 15 Jan 2025 at 07:16, wrote: > A new dependency was added since 3.3, alloca(), which is not portable. Is > there a way around this? > > Thanks, > > Randall > > > > *From:* rsync *On Behalf Of *rsync.p

RE: new release 3.4.0 - critical security release

2025-01-14 Thread Randall S. Becker via rsync
A new dependency was added since 3.3, alloca(), which is not portable. Is there a way around this? Thanks, Randall From: rsync On Behalf Of rsync.project via rsync Sent: January 14, 2025 2:49 PM To: rsync-annou...@lists.samba.org Cc: rsync@lists.samba.org Subject: new release 3.4.0 - critic

Re: new release 3.4.0 - critical security release

2025-01-14 Thread Charalampos Mitrodimas via rsync
"rsync.project via rsync" writes: > We have just released version 3.4.0 of rsync. This release fixes 6 security > vulnerabilities found by two > groups of security researchers. > > You can find the new release links here: > > - https://rsync.samba.org/ > - https://download.samba.org/pub/rsync/