Sync rsync from Debian unstable for oracular

[Bryce Harrington]

Upstream: tbd
Debian: 3.3.0-1
Ubuntu: 3.2.7-1ubuntu1

Debian does new releases regularly, so it's likely there will be newer versions available before FF that we can pick up if this merge is done later in the cycle.

If it turns out this needs a sync rather than a merge, please change the tag 'needs-merge' to 'needs-sync', and (optionally) update the title as desired.

If this merge pulls in a new upstream version, also consider adding an entry to the Oracular Release Notes: https://discourse.ubuntu.com/c/release/38

### New Debian Changes ###

rsync (3.3.0-1) unstable; urgency=medium

  [ Aquila Macedo Costa ]
  * d/control: Bump Standards-Version to 4.6.2

  [ Samuel Henrique ]
  * New upstream version 3.3.0 (closes: #1068630)
  * Bump Standards-Version to 4.7.0
  * Update patches
  * d/patches: Drop merged patches
  * d/control: Drop dependency on lsb-base
  * d/rsync.lintian-overrides: Update overrides

 -- Samuel Henrique <email address hidden> Fri, 12 Apr 2024 00:28:29 +0100

rsync (3.2.7-1) unstable; urgency=medium

  [ Juri Grabowski ]
  * New upstream version 3.2.7
  * Remove patches included in new release

  [ Helmut Grohne ]
  * Fix FTCBFS: Use native instances for python build depends
    (closes: #1022988).

  [ Samuel Henrique ]
  * d/rsync.lintian-overrides: Update findings as per lintian changes
  * d/patches: Add two upstream patches to fix issues post 3.2.7 release:
    - trust_the_sender_on_a_local_transfer.patch
    - avoid_quoting_of_tilde_when_its_a_destination_arg.patch

 -- Samuel Henrique <email address hidden> Sun, 18 Dec 2022 14:10:54 +0000

rsync (3.2.6-4) unstable; urgency=medium

  * Upload to unstable
    - d/patches:
      ~ fix_files_from.patch: Upstream patch to address the files-from issue.
      ~ fix_relative.patch: Upstream patch to fix exclusion of /. with
        --relative.
      ~ fix_remote_filter_rules_validation.patch: Upstream patch to fix bug
        with validating remote filter rules.
    (closes: #1018296, #1019561)

 -- Samuel Henrique <email address hidden> Wed, 21 Sep 2022 18:58:57 +0100

rsync (3.2.6-3) experimental; urgency=medium

  * d/patches:
    - fix_files_from.patch: Upstream patch to address the files-from issue,
      likely to also be related to #1019561 and #1018296
    - fix_relative.patch: Upstream patch to fix exclusion of /. with --relative

 -- Samuel Henrique <email address hidden> Wed, 14 Sep 2022 19:25:19 +0100

rsync (3.2.6-2) experimental; urgency=medium

  * d/p/fix_remote_filter_rules_validation.patch: New upstream patch to try to
    fix #1019561 and #1018296

 -- Samuel Henrique <email address hidden> Tue, 13 Sep 2022 20:55:01 +0100

rsync (3.2.6-1) unstable; urgency=medium

  * New upstream version 3.2.6
    - Added a safety check that prevents the sender from removing destination
      files when a local copy using --remove-source-files has some files that
      are shared between the sending & receiving hierarchies, including the
      case where the source dir & destination dir are identical
      (closes: #1016102)
  * Bump Standards-Version to 4.6.1

 -- Samuel Henrique <email address hidden> Sat, 10 Sep 2022 20:03:51 +0100

rsync (3.2.5-1) unstable; urgency=medium

  * New upstream version 3.2.5
    - Added some file-list safety checking that helps to ensure that a rogue
      sending rsync can't add unrequested top-level names and/or include
      recursive names that should have been excluded by the sender. These
      extra safety checks only require the receiver rsync to be updated. When
      dealing with an untrusted sending host, it is safest to copy into a
      dedicated destination directory for the remote content (i.e. don't copy
      into a destination directory that contains files that aren't from the
      remote host unless you trust the remote host)
      (closes: #1016543, CVE-2022-29154).
    - The build date that goes into the manpages is now based on the
      developer's release date, not on the build's local-timezone
      interpretation of the date (closes: #1009981)

 -- Samuel Henrique <email address hidden> Tue, 16 Aug 2022 11:03:48 +0100

rsync (3.2.4-1) unstable; urgency=medium

  [ Samuel Henrique ]
  * New upstream version 3.2.4
    - Work around a glibc bug where lchmod() breaks in a chroot w/o /proc
      mounted (closes: #995046).
    - rsync.1: remove prepended backticks which broke --stop-after and
      --stop-at formatting (closes: #1007990).

### Old Ubuntu Delta ###

rsync (3.2.7-1ubuntu1) noble; urgency=medium

  * add d/p/fix_crashes_with_fortified_strlcpy.patch (LP: #2060967)
    - Fixes a buffer overflow when using -F flag.

 -- Mitchell Dzurick <email address hidden> Fri, 12 Apr 2024 10:09:41 -0700

rsync (3.2.7-1build3) noble; urgency=high

  * No change rebuild against libssl3t64.

 -- Julian Andres Klode <email address hidden> Mon, 08 Apr 2024 16:49:18 +0200

rsync (3.2.7-1build2) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <email address hidden> Sun, 31 Mar 2024 17:10:35 +0000

rsync (3.2.7-1build1) noble; urgency=medium

  * No-change rebuild against libssl3t64

 -- Steve Langasek <email address hidden> Mon, 04 Mar 2024 21:12:04 +0000

[Mitchell Dzurick (mitchdz)]

Please sync this.

PPA - https://launchpad.net/~mitchdz/+archive/ubuntu/lp2064457-rsync-oracular-merge

(The build runs the autopkgtest)

tested for the noble bug in an lxc container, which is the only ubuntu delta. Saw the issue is fixed.

root@o:~# dpkg -s rsync | grep Version:
Version: 3.3.0-1~oracular1
root@o:~# rsync -F --delete-after --archive /etc/os-release /tmp/
root@o:~#

[Bryce Harrington (bryce)]

Package sync sponsored:

$ syncpackage --force -b 2064457 -s mitchdz rsync
Source rsync -> oracular/Proposed: current version 3.2.7-1ubuntu1, new version 3.3.0-1
Downloading rsync_3.3.0-1.dsc from deb.debian.org (0.002 MiB)
[=====================================================>]100%
Downloading rsync_3.2.7-1ubuntu1.dsc from ports.ubuntu.com (0.002 MiB)
[=====================================================>]100%
Downloading changelog from launchpadlibrarian.net (0.054 MiB)
[=====================================================>]100%
New changes:
rsync (3.3.0-1) unstable; urgency=medium

  [ Aquila Macedo Costa ]
  * d/control: Bump Standards-Version to 4.6.2

  [ Samuel Henrique ]
  * New upstream version 3.3.0 (closes: #1068630)
  * Bump Standards-Version to 4.7.0
  * Update patches
  * d/patches: Drop merged patches
  * d/control: Drop dependency on lsb-base
  * d/rsync.lintian-overrides: Update overrides

 -- Samuel Henrique <email address hidden> Fri, 12 Apr 2024 00:28:29 +0100
Sponsoring this sync for Mitchell Dzurick (mitchdz)
Sync this package [y|N]? y
Request succeeded; you should get an e-mail once it is processed.
Launchpad bugs to be closed: 2064457
Please wait for the sync to be successful before closing bugs.

[Bryce Harrington (bryce)]

This bug was fixed in the package rsync - 3.3.0-1
Sponsored for Mitchell Dzurick (mitchdz)

---------------
rsync (3.3.0-1) unstable; urgency=medium

  [ Aquila Macedo Costa ]
  * d/control: Bump Standards-Version to 4.6.2

  [ Samuel Henrique ]
  * New upstream version 3.3.0 (closes: #1068630)
  * Bump Standards-Version to 4.7.0
  * Update patches
  * d/patches: Drop merged patches
  * d/control: Drop dependency on lsb-base
  * d/rsync.lintian-overrides: Update overrides

 -- Samuel Henrique <email address hidden> Fri, 12 Apr 2024 00:28:29 +0100