-rsync 2.5.3 (not released yet)
-
- SECURITY FIXES:
-
- * Make sure that supplementary groups are removed from a server
- process after changing uid and gid. (Ethan Benson) (Debian bug
- #132272, CVE CAN-2002-0080)
+NEWS for rsync 2.6.5 (UNRELEASED)
+Protocol: 29 (unchanged)
+Changes since 2.6.4:
BUG FIXES:
- * Fix zlib double-free bug. (Owen Taylor, Mark J Cox) (CVE
- CAN-2002-0059)
-
- * Fixed problem that in many cases caused the error message
- unexpected read size of 0 in map_ptr
- and resulted in the wrong data being copied.
-
- * Fixed compilation errors on some systems caused by the use of
- "unsigned int64" in rsync.h.
-
- * Fixed problem on systems such as Sunos4 that do not support realloc
- on a NULL pointer; error was "out of memory in flist_expand".
+ - A crash bug was fixed when a daemon had its "path" set to "/", did
+ not have chroot enabled, and used some anchored excludes in the
+ config file.
- * Fix for rsync server processes hanging around after the client
- unexpectedly disconnects. (Colin Walters) (Debian bug #128632)
+ - Fixed a case where the generator might try to tweak the write
+ permissions of a read-only directory in list-only mode.
- * Cope with BSD systems on which mkdir() will not accept a trailing
- slash.
+ - If --compare-dest or --link-dest uses a locally-copied file as the
+ basis for an updated version, log this better when --verbose or -i
+ in in effect.
ENHANCEMENTS:
- * Merge in changes from zlib 1.1.2 to zlib 1.1.3. (Note that
- rsync still uses a custom version of zlib; you can not just link
- against a system library. See zlib/README.rsync)
+ - Changed the outputting of "safe" filenames to use backslash-escaped
+ characters rather than '?'s. Any non-printable character is output
+ using octal (e.g. "\n" -> "\012"), and backslash is output as "\\".
- * Command to initiate connections is only shown with -vv, rather
- than -v as in 2.5.2. Output from plain -v is more similar to
- what was historically used so as not to break scripts that try
- to parse the output.
+ INTERNAL:
- * Added --no-whole-file and --no-blocking-io options (Dave Dykstra)
+ - Rsync now calls setlocale(LC_CTYPE, "").
- * Made the --write-batch and --read-batch options actually work
- and added documentation in the man page (Jos Backus)
+ BUILD CHANGES:
- * If the daemon is unable to fork a child to accept a connection,
- print an error message. (Colin Walters)
+ - You can use --disable-locale to turn off any use of setlocale().