* [PATCH 2/4] rsync: upgrade 3.5.1 -> 3.5.2
2026-11-04 11:38 [PATCH 1/4] repo: upgrade 2.71 -> 2.72 Jaipaul Cheernam
@ 2026-11-04 11:38 ` Jaipaul Cheernam
2026-11-04 13:52 ` [OE-core] " Mathieu Dubois-Briand
2026-11-04 11:38 ` [PATCH 3/4] xorgproto: upgrade 2025.1 -> 2026.1 Jaipaul Cheernam
2026-11-04 11:38 ` [PATCH 4/4] ppp: upgrade 2.5.4 -> 2.5.5 Jaipaul Cheernam
2 siblings, 1 reply; 6+ messages in thread
From: Jaipaul Cheernam @ 2026-11-04 11:38 UTC (permalink / raw)
To: openembedded-core
NEWS: https://download.samba.org/pub/rsync/NEWS#3.5.2
- Fixed interrupted `--append` and `--inplace` transfers writing the final
256 KiB buffer twice. An interrupted destination now remains a clean prefix
which the next transfer can resume or repair.
- Fixed uploads through `rrsync` when the destination file already exists.
Existing files are now reached beneath a pinned parent directory instead of
being passed as an unwritable `/proc/self/fd/N` destination.
- Fixed poor matching performance on large sparse and repeated-block files
when duplicate checksum chains exhausted the search limit. Valid basis
blocks are no longer hidden behind duplicate entries.
- Bounded strong-checksum work when a malicious receiver supplies weak
checksums that collide with consecutive rolling windows
(CVE-2026-119741).
- Prevented the `--inplace` matcher from advancing its aligned basis index
beyond the available checksum entries. This avoids signed overflow on large
source files when the peer supplies a small block count.
- Recovered from failed hard-link creation without aborting or hanging the
generator. Remaining members fall back to a fresh hard-link group when the
original destination inode cannot accept another link.
- Prevented an out-of-bounds write while invalidating a sender checksum after
a file read error when the negotiated checksum length is zero.
- Fixed a daemon receiver stack overflow when queued deletion output reached
`--max-alloc`. Quiet daemon transfers no longer queue deletion messages
unless the client requested them.
- Fixed a `--files-from` pull from a subdirectory of a daemon module, which
read each listed file from the module root instead. It could send, and with
`--remove-source-files` delete, a same-named file the module's filter
excludes.
- Fixed password files whose first line is empty. The parser no longer skips
the empty line and uses a later password.
- Escaped terminal control characters in filenames and diagnostics written to
standard output, standard error and log files while preserving printable
text in the active locale.
- Preserved Cygwin and MSYS2 UNC roots during ownership-checked path walks.
- Restored daemon startup from accepted named Unix sockets on standard input,
including filesystem and Linux abstract sockets used for socket activation.
Unnamed local socket pairs remain non-daemon channels.
- Fixed forward-DNS hostname entries in daemon `hosts allow` and `hosts deny`
lists for IPv6 peers. Address comparison is now binary and family-aware.
- Preserved Unix symlink permissions on systems which require `fchmodat()` to
change the mode of a symlink rather than its target.
- Restored builds on systems without `O_CLOEXEC` or `O_DIRECTORY`, including
Solaris 10.
- Added `--nice` to adjust CPU and I/O scheduling priorities for local and
remote rsync processes. Daemon clients and rrsync cannot raise server-side
priorities.
- Human-readable output now uses dynamic precision to show three significant
digits and appends `i` to binary unit suffixes. `--progress` uses the same
formatter for transfer rates and labels byte counts and rates with `B` and
`B/s`. Example output includes `46.7M`, `48.8Mi`, `782,448B` and
`113,295B/s`. File-list, created-directory and skipped-deletion counts also
use thousands separators.
- Added `--delay-symlinks` to defer creating new and changed symlinks until
other transferred files are in place. It implies `--no-inc-recursive` and
requires protocol 29 or newer with support on the receiving side. It cannot
be combined with `--remove-source-files`, `--hard-links`, `--compare-dest`,
`--copy-dest` or `--link-dest`.
------------------------------------------------------------------------------
| 04 Nov 2026 | 3.5.2 | | 33 |
Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
---
...-Add-missing-prototypes-to-function-declarations.patch | 8 ++++----
meta/recipes-devtools/rsync/files/determism.patch | 4 ++--
.../rsync/files/makefile-no-rebuild.patch | 6 +++---
.../rsync/{rsync_3.5.1.bb => rsync_3.5.2.bb} | 2 +-
4 files changed, 10 insertions(+), 10 deletions(-)
rename meta/recipes-devtools/rsync/{rsync_3.5.1.bb => rsync_3.5.2.bb} (97%)
diff --git a/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch b/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch
index 1f1fc3f3b3..9f271fa6e2 100644
--- a/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch
+++ b/meta/recipes-devtools/rsync/files/0001-Add-missing-prototypes-to-function-declarations.patch
@@ -1,4 +1,4 @@
-From 56a785a7d964f797a786b2d5b75d9cee51b530b1 Mon Sep 17 00:00:00 2001
+From 5db6185e95929b7edc665b5f029ffd6a6f900eb3 Mon Sep 17 00:00:00 2001
From: Khem Raj <raj.khem@gmail.com>
Date: Mon, 29 Aug 2022 19:53:28 -0700
Subject: [PATCH] Add missing prototypes to function declarations
@@ -50,10 +50,10 @@ index 7476f6a..b939a0c 100644
if (partial_string_buf) {
if (partial_string_len)
diff --git a/log.c b/log.c
-index 889b57b..19e5e98 100644
+index bf30df9..7da831b 100644
--- a/log.c
+++ b/log.c
-@@ -140,7 +140,7 @@ static void logit(int priority, const char *buf)
+@@ -147,7 +147,7 @@ static void logit(int priority, const char *buf)
}
}
@@ -63,7 +63,7 @@ index 889b57b..19e5e98 100644
int options = LOG_PID;
diff --git a/main.c b/main.c
-index ed6e554..b5f9448 100644
+index 63c35a1..2d0c165 100644
--- a/main.c
+++ b/main.c
@@ -250,7 +250,7 @@ void read_del_stats(int f)
diff --git a/meta/recipes-devtools/rsync/files/determism.patch b/meta/recipes-devtools/rsync/files/determism.patch
index 890275f6d7..8883f9ffab 100644
--- a/meta/recipes-devtools/rsync/files/determism.patch
+++ b/meta/recipes-devtools/rsync/files/determism.patch
@@ -1,4 +1,4 @@
-From e784131e4ccbaf8ad7107d1f7a7f13da8c675827 Mon Sep 17 00:00:00 2001
+From 637d3e6dd6414c89b3a0e96eccbb8b37d179acec Mon Sep 17 00:00:00 2001
From: Richard Purdie <richard.purdie@linuxfoundation.org>
Date: Sun, 21 Feb 2021 09:45:48 +0000
Subject: [PATCH] rsync: Fix a file sorting determinism issue
@@ -25,7 +25,7 @@ https://github.com/WayneD/rsync/commit/d3085f7add38a5cf833a0b31cb0637ff46c80f8d
1 file changed, 5 insertions(+)
diff --git a/Makefile.in b/Makefile.in
-index de24949..bb9bb27 100644
+index 9de687e..44a8ee6 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -28,6 +28,11 @@ MKDIR_P=@MKDIR_P@
diff --git a/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch b/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch
index 59255d15e7..4734f2c7c4 100644
--- a/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch
+++ b/meta/recipes-devtools/rsync/files/makefile-no-rebuild.patch
@@ -1,4 +1,4 @@
-From 0e1f2aec0dbfc150013860b42b41645cebe236b7 Mon Sep 17 00:00:00 2001
+From 79b3194efff7e55ae9d0fadc40d45bec4bd37ea7 Mon Sep 17 00:00:00 2001
From: Ross Burton <ross.burton@intel.com>
Date: Tue, 12 Apr 2016 15:51:54 +0100
Subject: [PATCH] rsync: remove upstream's rebuild logic
@@ -13,10 +13,10 @@ Signed-off-by: Ross Burton <ross.burton@intel.com>
1 file changed, 54 deletions(-)
diff --git a/Makefile.in b/Makefile.in
-index 716171d..de24949 100644
+index 3a5d509..9de687e 100644
--- a/Makefile.in
+++ b/Makefile.in
-@@ -267,60 +267,6 @@ conf: configure.sh config.h.in
+@@ -306,60 +306,6 @@ conf: configure.sh config.h.in
.PHONY: gen
gen: conf proto.h man git-version.h
diff --git a/meta/recipes-devtools/rsync/rsync_3.5.1.bb b/meta/recipes-devtools/rsync/rsync_3.5.2.bb
similarity index 97%
rename from meta/recipes-devtools/rsync/rsync_3.5.1.bb
rename to meta/recipes-devtools/rsync/rsync_3.5.2.bb
index 6b121ab1a8..299b444898 100644
--- a/meta/recipes-devtools/rsync/rsync_3.5.1.bb
+++ b/meta/recipes-devtools/rsync/rsync_3.5.2.bb
@@ -16,7 +16,7 @@ SRC_URI = "https://download.samba.org/pub/${BPN}/src/${BP}.tar.gz \
file://determism.patch \
file://0001-Add-missing-prototypes-to-function-declarations.patch \
"
-SRC_URI[sha256sum] = "c55f9c9dc10fb8bec397b399a0fdded53cc9a2d8e30891bb0d63724d25c37bef"
+SRC_URI[sha256sum] = "a10d591825251e070f74c98df3daad195def4ed81b4a2de16169026aea33f6c8"
# Out-of-tree builds don't install the documentation currently
# https://github.com/RsyncProject/rsync/issues/846
^ permalink raw reply related [flat|nested] 6+ messages in thread* [PATCH 4/4] ppp: upgrade 2.5.4 -> 2.5.5
2026-11-04 11:38 [PATCH 1/4] repo: upgrade 2.71 -> 2.72 Jaipaul Cheernam
2026-11-04 11:38 ` [PATCH 2/4] rsync: upgrade 3.5.1 -> 3.5.2 Jaipaul Cheernam
2026-11-04 11:38 ` [PATCH 3/4] xorgproto: upgrade 2025.1 -> 2026.1 Jaipaul Cheernam
@ 2026-11-04 11:38 ` Jaipaul Cheernam
2 siblings, 0 replies; 6+ messages in thread
From: Jaipaul Cheernam @ 2026-11-04 11:38 UTC (permalink / raw)
To: openembedded-core
ReleaseNotes: https://github.com/ppp-project/ppp/releases/tag/v2.5.5
This is a bug-fix and security release, with no new features. Changes include:
- Fix bugs where hook scripts such as /etc/ppp/ip-up were not being run.
- Fix bugs causing PPP_SCRIPT_INSTANCE to be set incorrectly for some scripts.
- Fix validation of received frames in the RADIUS plugin, along with some further hardening against incorrect received frames.
- Fix generation of MPPE keys when EAP-TLS is being used with TLS 1.3. This makes it work with Windows clients, but breaks compatibility with earlier versions of pppd (but only in the case where EAP-TLS and MPPE and the 'max-tls-version 1.3' option are all being used).
- Various cases existed in the MPPE code where the link could come up without MPPE encryption despite it being requested via one or more of the 'require-mppe', 'require-mppe-40' or 'require-mppe-128' options. This is now fixed. Also, pppd will now accept an MPPE CCP configuration option requesting no encryption from the peer if MPPE is not required (rather than rejecting it).
- Fix a bug where the password from a file specified with the '+ua' option was not being used.
Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
---
meta/recipes-connectivity/ppp/{ppp_2.5.4.bb => ppp_2.5.5.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-connectivity/ppp/{ppp_2.5.4.bb => ppp_2.5.5.bb} (98%)
diff --git a/meta/recipes-connectivity/ppp/ppp_2.5.4.bb b/meta/recipes-connectivity/ppp/ppp_2.5.5.bb
similarity index 98%
rename from meta/recipes-connectivity/ppp/ppp_2.5.4.bb
rename to meta/recipes-connectivity/ppp/ppp_2.5.5.bb
index 6f7977ece3..4a21b94907 100644
--- a/meta/recipes-connectivity/ppp/ppp_2.5.4.bb
+++ b/meta/recipes-connectivity/ppp/ppp_2.5.5.bb
@@ -25,7 +25,7 @@ SRC_URI = "https://download.samba.org/pub/${BPN}/${BP}.tar.gz \
file://ppp@.service \
"
-SRC_URI[sha256sum] = "379a630a40d858a1347f6592d671791dde12101697a743ef9900012f3765be31"
+SRC_URI[sha256sum] = "0ebbcfef906d16cfbb9cbdd19c0d92aa3df2fd8fdd29731f614c58d16a279aa5"
inherit autotools pkgconfig systemd
^ permalink raw reply related [flat|nested] 6+ messages in thread