rsync/rsync.spec
Funda Wang 1bc680d641 fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088, CVE-2024-12747
(cherry picked from commit 9d6a36e36eee9db602c09e7d1cc8d00dfe34eb56)
2025-01-16 17:27:47 +08:00

161 lines
4.8 KiB
RPMSpec

Name: rsync
Version: 3.2.7
Release: 6
Summary: Fast incremental file transfer utility
License: GPL-3.0-or-later
URL: http://rsync.samba.org/
Source0: https://download.samba.org/pub/rsync/src/rsync-%{version}.tar.gz
Source1: rsyncd.socket
Source2: rsyncd.service
Source3: rsyncd.conf
Source4: rsyncd.sysconfig
Source5: rsyncd@.service
Patch6000: backport-Fix-overflow-of-sum2-buffer-for-sha1-rolling-checksu.patch
Patch6001: backport-Duplicate-argv-data-before-poptFreeContext.patch
Patch6002: backport-CVE-2024-12084-part1.patch
Patch6003: backport-CVE-2024-12084-part2.patch
Patch6004: backport-CVE-2024-12085.patch
Patch6005: backport-CVE-2024-12086-part1.patch
Patch6006: backport-CVE-2024-12086-part2.patch
Patch6007: backport-CVE-2024-12086-part3.patch
Patch6008: backport-CVE-2024-12086-part4.patch
Patch6009: backport-CVE-2024-12087-part1.patch
Patch6010: backport-CVE-2024-12087-part2.patch
Patch6011: backport-CVE-2024-12088.patch
Patch6012: backport-CVE-2024-12747.patch
Patch6013: backport-Fix_use-after-free_in_generator.patch
Patch6014: backport-Fix-FLAG_GOT_DIR_FLIST-collission-with-FLAG_HLINKED.patch
BuildRequires: git gcc systemd libacl-devel libattr-devel autoconf popt-devel
BuildRequires: lz4-devel openssl-devel libzstd-devel
Provides: bundled(zlib) = 1.2.8 rsync-daemon
Obsoletes: rsync-daemon
%{?systemd_requires}
%description
Rsync is an open source utility that provides fast incremental file transfer.
It uses the "rsync algorithm" which provides a very fast method for bringing
remote files into sync. It does this by sending just the differences in the
files across the link, without requiring that both sets of files are present
at one of the ends of the link beforehand.
%package help
Summary: Fast incremental file transfer utility
Provides: rsync-doc
%description help
Rsync is an open source utility that provides fast incremental file transfer.
It uses the "rsync algorithm" which provides a very fast method for bringing
remote files into sync. It does this by sending just the differences in the
files across the link, without requiring that both sets of files are present
at one of the ends of the link beforehand.
%prep
%autosetup -n %{name}-%{version} -p1
%build
%if "%{?toolchain}" == "clang"
CFLAGS="${CFLAGS:-%{?build_cflags}} -Wno-strict-prototypes"; export CFLAGS;
%endif
%configure --disable-xxhash
%make_build
%check
make check
%install
%make_install
install -D -m644 %{SOURCE1} %{buildroot}/%{_unitdir}/rsyncd.socket
install -D -m644 %{SOURCE2} %{buildroot}/%{_unitdir}/rsyncd.service
install -D -m644 %{SOURCE3} %{buildroot}/%{_sysconfdir}/rsyncd.conf
install -D -m644 %{SOURCE4} %{buildroot}/%{_sysconfdir}/sysconfig/rsyncd
install -D -m644 %{SOURCE5} %{buildroot}/%{_unitdir}/rsyncd@.service
%pre
%preun
%systemd_preun rsyncd.service
%post
%systemd_post rsyncd.service
%postun
%systemd_postun_with_restart rsyncd.service
%files -n rsync
%defattr(-,root,root)
%doc tech_report.tex
%attr(0644,root,root) %doc support/*
%license COPYING
%config(noreplace) %{_sysconfdir}/*.conf
%config(noreplace) %{_sysconfdir}/sysconfig/rsyncd
%{_unitdir}/rsyncd*
%{_bindir}/rsync*
%{_bindir}/rsync
%files help
%{_mandir}/man1/%{name}.1*
%{_mandir}/man1/%{name}-ssl.1*
%{_mandir}/man5/rsyncd.conf.5*
%changelog
* Wed Jan 15 2025 Funda Wang <fundawang@yeah.net> - 3.2.7-6
- fix CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,
CVE-2024-12088, CVE-2024-12747
* Wed Oct 9 zhoupengcheng <zhoupengcheng11@huawei.com> - 3.2.7-5
- backport patch from upstream
* Thu Jul 11 2024 Wenhua Huang <huangwenhua@kylinos.cn> - 3.2.7-4
- Type: bugfix
- CVE:NA
- SUG:NA
- DESC: Fix overflow of sum2 buffer for sha1 rolling checksums.
* Thu Feb 22 2024 Xiaoya Huang <huangxiaoya@iscas.ac.cn> - 3.2.7-3
- Type: enhencement
- CVE:
- SUG:NA
- DESC: support clang build
* Thu Jun 15 2023 zhoupengcheng <zhoupengcheng11@huawei.com> - 3.2.7-2
- Type:bugfix
- CVE:
- SUG:NA
- DESC:Restrict the doc permission in rsync to 644.
* Tue Jan 31 2023 wangjunqi <wangjunqi@kylinos.cn> - 3.2.7-1
- update version to 3.2.7
* Thu Aug 18 2022 fuanan <fuanan3@h-partners.com> - 3.2.5-1
- Update version to 3.2.5
- Fix CVE-2022-29154,CVE-2022-37434
* Fri Jun 18 2021 yangzhuangzhuang <yangzhuangzhuang1@huawei.com> - 3.2.3-2
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:Fix CVE-2020-14387
* Fri Jan 22 2021 yixiangzhike <zhangxingliang3@huawei.com> - 3.2.3-1
- Type:requirement
- ID:NA
- SUG:NA
- DESC:update to 3.2.3
* Tue Jul 28 2020 Liquor <lirui130@huawei.com> - 3.2.1-1
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:update to 3.2.1
* Fri Sep 27 2019 chengquan<chengquan3@huawei.com> - 3.1.3-6
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:fix spec rule in openeuler
* Mon Sep 09 2019 openEuler Buildteam <buildteam@openeuler.org> - 3.1.3-5
- Package init