-NEWS for rsync 2.6.5 (UNRELEASED)
+NEWS for rsync 2.6.6 (UNRELEASED)
Protocol: 29 (unchanged)
-Changes since 2.6.4:
+Changes since 2.6.5:
- OUTPUT CHANGES:
+ SECURITY FIXES:
- - Non-printable chars in filenames are now output using backslash-
- escaped characters rather than '?'s. Any non-printable character is
- output using 3 digits of octal (e.g. "\n" -> "\012"), and a backslash
- is now output as "\\". Rsync also uses your locale setting, which
- should make it treat fewer high-bit characters as non-printable (when
- appropriate).
-
- - If rsync received an empty file list when pulling files, it would
- output an "nothing to do" message and exit with a 0 (success) exit
- status, even if the remote rsync returned an error (it did not do
- this under the same conditions when pushing files). This was changed
- to make the pulling behavior the same as the pushing behavior -- we
- now do the normal end-of-run outputting (depending on options) and
- exit with the appropriate exit status.
+ - Applied a zlib fix to block a buffer overflow in the decompression
+ code. Only affects a daemon if it allows uploads and does not refuse
+ the --compress option.
BUG FIXES:
- - A crash bug was fixed when a daemon had its "path" set to "/", did
- not have chroot enabled, and used some anchored excludes in the
- rsyncd.conf file.
-
- - Fixed a bug in the transfer of a single file when -H is specified
- that might have caused an infinite loop or perhaps a crash.
-
- - Fixed a case where the generator might try to tweak the write
- permissions of a read-only directory in list-only mode.
-
- - If --compare-dest or --link-dest uses a locally-copied file as the
- basis for an updated version, log this better when --verbose or -i
- is in effect.
-
- - Fixed the accidental disabling of --backup during the --delete-after
- processing.
-
- - Restored the ability to use the --address option in client mode (in
- addition to its use in daemon mode).
-
- - Make sure that some temporary progress information from the delete
- processing does not get left on the screen when it is followed by a
- newline.
+ - The setting of flist->high in clean_flist() was wrong for an empty list.
+ This could cause flist_find() to crash in certain rare circumstances
+ (e.g. if just the right directory setup was around when --fuzzy was
+ combined with --link-dest).
- - When --existing skips a directory with extra verbosity, don't refer
- to it as a "file".
+ - The outputting of hard-linked files when verbosity was > 1 was not right:
+ without -i it would output the name of each hard-linked file as though
+ it had been changed (it now outputs a "is hard linked" message for the
+ file); with -i it would output all dots for the unchanged attributes of
+ a hard-link (it now changes those dots to spaces, as is done for other
+ totally unchanged items).
- - When transferring a single file to a different-named file, any
- generator messages that are source-file related no longer refer to
- the file by the destination filename.
+ - When backing up a changed symlink or device, get rid of any old backup
+ item so that we don't get an "already exists" error.
- - Fixed a bug where hard-linking a group of files might fail if the
- generator hasn't created the destination directory yet.
+ - A couple places that were comparing a local and a remote modification-
+ time were not honoring the --modify-window option.
- - Fixed a bug where a hard-linked group of files that is newly-linked
- to a file in a --link-dest dir doesn't link the files from the rest
- of the cluster.
+ - Fixed a really old, minor bug that could cause rsync to warn about being
+ unable to mkdir() a path that ends in "/." because it just created the
+ directory (required --relative, --no-implied-dirs, a source path that
+ ended in either a trailing slash or a trailing "/.", and a non-existing
+ destination dir to tickle the bug in a recent version).
- - When deleting files with the --one-file-system (-x) option set, rsync
- no longer tries to remove files from inside a mount-point on the
- receiving side.
-
- - Fixed a compatibility problem when using --cvs-ignore (-C) and
- sending files to an older rsync without using --delete.
+ - If the user specifies a remote-host for both the source and destination,
+ we now output a syntax error rather than trying to open the destination
+ hostspec as a filename.
ENHANCEMENTS:
- - Added the --only-write-batch=FILE option that may be used (instead
- of --write-batch=FILE) to create a batch file without doing any
- actual updating of the destination. This allows you to divert all
- the file-updating data away from a slow data link (as long as you
- are pushing the data to the remote server when creating the batch).
-
- - When the generator is taking a long time to fill up its output buffer
- (e.g. if the transferred files are few, small, or missing), it now
- periodically flushes the output buffer so that the sender/receiver
- can get started on the files sooner rather than later.
-
- - Improved the auth-errors that are logged by the daemon to include
- some information on why the authorization failed (wrong user,
- password mismatch, etc.). (The client-visible message is unchanged.)
+ - Made the "max verbosity" setting in the rsyncd.conf file settable on a
+ per-module basis (which now matches the documentation).
- - Improved the client's handling of an "@ERROR" from a daemon so that
- it does not complain about an unexpectedly closed socket (since we
- really did expect the socket to close).
+ - The support/rrsync script has been upgraded to verify the args of options
+ that take them (instead of rejecting any such options). The script was
+ also changed to try to be more secure and to fix a problem in the parsing
+ of a pull operation that has multiple sources.
- - If the daemon can't open the log-file specified in rsyncd.conf, fall
- back to using syslog. This is better than a (typically) totally
- silent failure (since a daemon is not usually run with --no-detach).
-
- INTERNAL:
-
- - Rsync now calls setlocale(LC_CTYPE, "").
+ - Upgraded the zlib code from 1.1.4 to 1.2.2 (plus the security fix
+ mentioned above).
BUILD CHANGES:
- - Fixed a bug in the SUPPORT{,_HARD}_LINKS defines which prevented
- rsync from being built without symlink or hard-link support.
-
- - You can use --disable-locale to turn off any use of setlocale().
+ - Made configure define NOBODY_USER (currently hard-wired to "nobody") and
+ NOBODY_GROUP (set to either "nobody" or "nogroup" depending on what we
+ find in the /etc/group file).
- - Configure now disables the use of mkstemp() under HP-UX (since they
- refuse to fix its broken handling of large files).
+ - Added a test to the test suite, itemized.test, that tests the output of
+ -i (log-format w/%i) and some double-verbose messages.
- - Configure now explicitly checks for the lseek64() function so that
- the code can use HAVE_LSEEK64 instead of inferring lseek64()'s
- presence based on the presence of the off64_t type.