disable_reconfigure_req.diff
skip_devices_test_non_linux.patch
env_shebang.patch
fix_rrsync_man_generation.patch
sec-0001-using-a-correct-time-in-log-file.patch
sec-0002-testsuite-added-clean-fname-underflow-test.patch
sec-0003-reject-negative-token-values-in-compressed-stream-receivers.patch
sec-0004-fix-uninitialized-mul-one-in-avx2-checksum-and-add-simd-chec.patch
sec-0005-zero-all-new-memory-from-allocations.patch
sec-0006-syscall-use-openat2-resolve-beneath-on-linux-for-secure-rela.patch
sec-0007-syscall-also-use-o-resolve-beneath-on-freebsd-and-macos.patch
sec-0008-testsuite-skip-symlink-dirlink-basis-on-platforms-without-re.patch
CVE-2026-29518-syscall-clientserver-am-chrooted-and-use-secure-symlinks-for.patch
CVE-2026-29518-sender-fix-read-path-toctou-by-opening-from-module-root-cve-.patch
CVE-2026-29518-syscall-receiver-secure-receiver-side-do-chmod-against-symli.patch
sec-0012-syscall-add-symlink-race-safe-do-at-wrappers-and-harden-secu.patch
sec-0013-util1-syscall-secure-copy-file-source-dest-opens-bare-path-d.patch
sec-0014-testsuite-end-to-end-regression-test-for-chdir-symlink-race.patch
CVE-2026-43618-token-harden-compressed-token-decoding-against-integer-overf.patch
CVE-2026-70458-defence-in-depth-bound-wire-supplied-counts-and-lengths.patch
sec-0017-rsync-h-lower-max-wire-del-stat-to-avoid-signed-int-overflow.patch
sec-0018-util1-handle-out-of-range-times-in-timestring.patch
sec-0019-receiver-fix-absolute-partial-dir-delta-resume-false-verific.patch
CVE-2026-70461-flist-accept-the-missing-args-mode-0-entry-in-recv-file-entr.patch
sec-0021-sender-open-a-module-root-absolute-path-for-a-path-module-89.patch
sec-0022-syscall-receiver-honour-a-relative-alt-basis-dir-on-a-daemon.patch
sec-0023-alloc-revert-zero-all-new-memory-from-allocations-959.patch
sec-0024-build-fall-back-to-do-mknod-when-mknodat-is-unavailable-896.patch
sec-0025-build-openat2-autodetect-android-probe-r1-924-905-900-r10-90.patch
sec-0026-receiver-fix-null-deref-on-the-delta-discard-path.patch
CVE-2026-53788-clientserver-harden-daemon-name-converter-responses.patch
sec-0028-exclude-flist-confine-daemon-filter-merge-and-implied-parent.patch
sec-0029-loadparm-shell-escape-rsync-hook-expansions.patch
sec-0030-options-bound-size-args-and-escape-remote-shell-newlines.patch
sec-0031-io-reject-malformed-wire-indices-and-zero-length-checksum-bl.patch
sec-0032-xattrs-cap-peer-supplied-wire-data.patch
sec-0033-configure-detect-fdopendir-and-a-working-dirfd.patch
sec-0034-syscall-p0-held-dirfd-scaffolding-open-dir-secure-do-atfd-wr.patch
sec-0035-syscall-replace-the-openat2-resolver-with-the-held-dirfd-sta.patch
CVE-2026-53795-sender-follow-an-in-tree-symlink-leaf-confined-for-the-copy-.patch
sec-0037-syscall-held-dfd-for-secure-mixed-parent-rename-and-fake-sup.patch
sec-0038-util1-set-times-at-make-path-parent-chain-via-do-mkdir-at.patch
sec-0039-rsync-generator-receiver-flist-route-attr-basis-scan-ops-thr.patch
sec-0040-main-util1-keep-operator-trusted-alt-dest-basis-dirs-accessi.patch
sec-0041-syscall-broaden-the-symlink-race-resolver-to-every-non-chroo.patch
sec-0042-syscall-hold-an-ancestor-dirfd-stack-as-the-held-directory-c.patch
sec-0043-syscall-close-the-chmod-leaf-race-with-a-held-fd-fchmod.patch
sec-0044-build-add-t-rename-secure-and-t-symlink-secure-check-helpers.patch
CVE-2026-53797-sender-confine-the-non-daemon-content-open-against-a-parent-.patch
sec-0046-flist-clientserver-confine-the-directory-scan-enumeration.patch
sec-0047-sender-read-symlink-targets-through-scan-dirfds.patch
sec-0048-util1-safe-open-no-attacker-symlinks-confine-daemon-module-r.patch
sec-0049-daemon-authenticate-open-operator-supplied-paths-refusing-pl.patch
sec-0050-syscall-resolve-the-daemon-s-served-module-anchor-via-the-pi.patch
sec-0051-exclude-refuse-planted-symlinks-at-filter-merge-from-paths.patch
sec-0052-daemon-secure-inner-chroot-module-paths.patch
CVE-2026-53796-util1-confine-the-non-daemon-receiver-s-destination-chdir-cr.patch
sec-0054-log-batch-refuse-planted-symlinks-at-log-file-and-write-read.patch
sec-0055-daemon-bound-argument-lists-proxy-protocol-peer-length-harde.patch
sec-0056-daemon-add-an-auth-digest-floor-to-refuse-weak-negotiated-au.patch
CVE-2026-70454-rsync-ssl-validate-helper-hostnames-and-require-a-ca-for-stu.patch
sec-0058-rrsync-deny-copy-unsafe-links-in-restricted-dirs-flock-fallb.patch
CVE-2026-53783-rrsync-backport-the-full-restricted-dir-hardening.patch
sec-0060-generator-confine-the-alt-dest-basis-stat-for-an-inner-modul.patch
sec-0061-generator-route-copy-altdest-file-failure-cleanup-through-do.patch
sec-0062-token-allow-uncompressed-literal-runs-larger-than-chunk-size.patch
sec-0063-lib-acl-c-posix-acl-get-set-via-fd-at-xattr-syscalls-unit-te.patch
sec-0064-rsync-acls-xattrs-apply-received-xattrs-and-acls-through-the.patch
sec-0065-xattrs-route-copy-xattrs-through-a-held-fd-not-lsetxattr-by-.patch
sec-0066-acls-keep-acls-functional-where-the-os-lacks-a-race-safe-acl.patch
sec-0067-lib-acl-close-the-pre-6-13-acl-parent-symlink-race-via-proc-.patch
sec-0068-acls-route-race-safe-acl-ops-through-libacl-at-when-availabl.patch
sec-0069-rsync-stat-through-the-held-dir-fd-in-set-file-attrs.patch
sec-0070-generator-don-t-read-an-unstat-d-sx-st-when-creating-a-devic.patch
sec-0071-log-copy-forwarded-message-by-length-in-rwrite-not-strlcpy.patch
sec-0072-wildtest-don-t-read-past-the-buffer-when-scanning-a-test-lin.patch
sec-0073-lib-pool-alloc-fence-chunks-with-an-asan-redzone-to-catch-po.patch
sec-0074-hlink-reject-undeclared-cross-flist-gnum-instead-of-assert.patch
sec-0075-flist-refuse-sub-flist-for-a-cleared-dir-flist-slot.patch
sec-0076-recv-files-refuse-transfer-phase-ndx-that-targets-a-cleared-.patch
sec-0077-flist-gate-flag-hlinked-on-preserve-hard-links-in-recv-file-.patch
sec-0078-log-do-not-dereference-f-sum-for-c-on-a-deleted-entry-log-li.patch
sec-0079-flist-refuse-flag-hlinked-on-directory-entries.patch
sec-0080-flist-refuse-sub-flist-after-the-final-flist-has-been-freed.patch
sec-0081-exclude-cap-merge-file-include-recursion-depth.patch
sec-0082-log-drop-receiver-side-assert-is-utf8-reachable-via-peer-msg.patch
sec-0083-options-clamp-snprintf-length-before-err-buf-len-write-in-pa.patch
CVE-2026-70453-match-re-check-len-l-before-substituting-want-i-in-hash-sear.patch
sec-0085-match-clamp-peer-supplied-s-flength-to-local-len-in-append-m.patch
CVE-2026-70461-exclude-count-trailing-backslash-in-add-implied-include.patch
sec-0087-io-defer-in-multiplexed-1-past-msg-noop-msg-io-error-call-ou.patch
sec-0088-io-ensure-argv-has-room-for-the-trailing-null-in-read-args.patch
sec-0089-io-defer-in-multiplexed-1-in-the-other-write-side-read-a-msg.patch
CVE-2026-53784-syscall-util1-race-safe-path-resolution-via-a-held-dirfd-sta.patch
CVE-2026-53793-confine-operator-and-peer-supplied-paths-to-the-served-modul.patch
CVE-2026-53786-daemon-treat-exclude-filter-as-a-name-filter-not-a-symlink-b.patch
sec-0093-socket-reject-control-bytes-in-the-proxy-connect-host.patch
CVE-2026-70454-batch-rsync-ssl-quote-replay-script-args-and-harden-rsync-ss.patch
sec-0095-docs-news-readme-and-man-pages-for-the-3-5-0-security-backpo.patch
sec-0096-main-raise-the-open-file-soft-limit-so-the-resolver-can-walk.patch
sec-0097-flist-receiver-zero-empty-the-device-symlink-extra-slots.patch
sec-0098-hlink-main-guard-the-f-sum-checksum-slot-lifetime.patch
sec-0099-generator-fix-off-by-one-length-in-read-delay-line.patch
sec-0100-compat-assign-metadata-ndx-after-batch-flags-pick-own-prefer.patch
sec-0101-options-token-bound-the-v-repetition-output-level-and-suffix.patch
sec-0102-io-xattrs-rsync-ssl-eof-sentinel-guard-xattr-ndx-guard-gnutl.patch
sec-0103-syscall-do-mknod-at-must-mkfifoat-for-an-operator-path-fifo-.patch
CVE-2026-70452-access-fail-closed-when-a-hosts-deny-token-can-t-be-resolved.patch
sec-0105-flist-xattrs-generator-uidlist-clientserver-plug-audit-repor.patch
sec-0106-daemon-insecure-links-opt-out-restores-legacy-symlink-follow.patch
sec-0107-backup-confine-cross-tree-operator-path-metadata-via-a-pinne.patch
sec-0108-confine-the-remaining-cross-tree-operator-path-syscalls.patch
CVE-2026-70462-io-reject-a-non-positive-msg-io-timeout-from-the-peer.patch
sec-0110-copy-file-confine-an-absolute-operator-source-via-the-owners.patch
CVE-2026-53794-hashtable-flist-fix-integer-overflows-in-size-computations.patch
sec-0112-io-main-make-the-sigusr2-handler-async-signal-safe.patch
sec-0113-syscall-drop-the-dead-name-is-dir-arg-from-abspath-excluded-.patch
sec-0114-daemon-make-insecure-links-yes-fully-restore-3-2-7-symlink-f.patch
CVE-2026-53799-rsync-pin-cross-tree-fake-super-metadata-writes-to-a-confine.patch
sec-0116-xattrs-backup-read-source-metadata-through-a-held-fd-not-a-p.patch
sec-0117-util1-declare-insecure-links-extern-for-the-change-dir-opt-o.patch
sec-0118-rsync-never-path-resolve-a-confined-receiver-s-xattr-acl-wri.patch
CVE-2026-53799-acls-implement-solaris-facl-2-based-acl-helpers.patch
sec-0120-lib-sysxattrs-make-write-xattr-more-robust.patch
sec-0121-receiver-don-t-abort-the-transfer-when-a-file-grows-during-t.patch
sec-0122-wildtest-use-stdbool-h-so-bool-works-from-c99-through-c23.patch
sec-0123-fix-bypass-of-safe-links-when-backup-hardlinks-a-symlink.patch
sec-0124-fix-spurious-abort-when-cvs-cvsignore-contains-clear-list-to.patch
sec-0125-util1-fix-clean-fname-collapse-off-by-one.patch
sec-0126-add-escape-to-out-format-and-log-file-format-strings.patch
sec-0127-mask-incoming-msg-io-error-to-defined-bits-only.patch
sec-0128-util1-confine-operator-paths-in-the-robust-rename-exdev-fall.patch
sec-0129-wildmatch-fold-bracket-expression-pattern-chars-under-force-.patch
sec-0130-flist-mask-peer-supplied-io-error-to-defined-bits.patch
sec-0131-backup-fail-closed-when-a-symlink-target-is-unreadable.patch
sec-0132-util1-drop-null-tests-on-robust-rename-s-from-to-args.patch
sec-0133-testsuite-correct-the-ki62-comment-about-msg-io-error-covera.patch
sec-0134-log-don-t-parse-the-second-of-as-a-new-format-escape.patch
sec-0135-syscall-confine-operator-paths-in-do-symlink-at-and-do-rmdir.patch
sec-0136-log-escape-control-chars-written-to-the-log-file.patch
sec-0137-chmod-a-s-must-set-both-setuid-and-setgid.patch
CVE-2026-70453-match-bound-the-hash-search-chain-walk-issue-217.patch
CVE-2026-70462-io-cap-msg-io-timeout-value-to-prevent-signed-integer-overfl.patch
CVE-2026-70462-io-make-set-io-timeout-arithmetic-overflow-safe.patch
CVE-2026-53802-rsync-confine-the-daemon-files-from-open-to-the-module-root.patch
CVE-2026-70459-rsync-sanitize-the-peer-supplied-basis-xname-on-the-client-t.patch
CVE-2026-70460-receiver-confine-peer-selected-partial-basis-paths.patch
CVE-2026-70460-receiver-only-reject-unconfined-partial-basis-when-in-place-.patch
CVE-2026-53801-flist-reject-non-directory-transfer-root-entries.patch
CVE-2026-53789-flist-keep-synthetic-and-legacy-implied-parents-non-content.patch
sec-0147-syscall-silence-scan-build-dead-store-in-do-fchmodat-nofollo.patch
sec-0148-authenticate-build-without-o-cloexec.patch
sec-0149-receiver-do-not-acknowledge-batch-only-files-as-installed.patch
sec-0150-receiver-retain-partial-dir-policy-across-eacces-recovery.patch
sec-0151-syscall-honor-operator-path-resolve-in-do-chmod-at-do-lchown.patch
sec-0152-daemon-quote-hook-expansions-for-their-shell-context.patch
sec-0153-daemon-refuse-peer-values-holding-shell-syntax-in-shell-hook.patch
CVE-2026-53800-sender-allow-confined-parent-relative-copy-links-targets.patch
sec-0155-syscall-defer-a-literal-to-the-walk-before-the-leaf-fast-pat.patch
sec-0156-sender-null-check-the-anchor-before-comparing-it-to-the-modu.patch
sec-0157-syscall-preserve-fake-super-backups-as-placeholders.patch
sec-0158-syscall-preserve-ordinary-mode-when-setgid-is-denied.patch
CVE-2026-53802-exclude-path-resolving-to-operator-path-supplied-filter-file.patch
CVE-2026-53802-exclude-exempt-the-daemon-s-own-filter-parameters-from-the-c.patch
CVE-2026-70463-auth-parse-auth-users-with-conf-strtok-so-a-leading-comma-me.patch
sec-0162-rrsync-pass-the-files-from-stdin-sentinel-through-unchecked.patch
sec-0163-rrsync-pin-a-sender-argument-where-rsync-will-actually-resol.patch
sec-0164-rrsync-only-claim-the-inode-pin-where-the-kernel-actually-pr.patch
CVE-2026-53783-rrsync-don-t-content-open-a-sender-leaf-rsync-will-never-ope.patch
sec-0166-rsync-add-drop-d-refusing-device-special-creation-only.patch
sec-0167-rrsync-deny-device-special-creation-where-creation-happens.patch
CVE-2026-70455-options-refuse-aliases-for-exact-option-rules.patch
sec-0169-rrsync-keep-remote-files-from-out-of-write-only-mode.patch
sec-0170-rrsync-protect-no-overwrite-auxiliary-paths.patch
sec-0171-daemon-reject-shell-active-hook-expansions.patch
sec-0172-rsyncd-conf-document-that-the-hook-metacharacter-refusal-cov.patch
sec-0173-daemon-refuse-and-braces-in-a-hook-expansion-too.patch
CVE-2026-53790-socket-reject-shell-active-connect-hosts.patch
sec-0175-socket-refuse-a-meaning-changing-first-character-and-stop-re.patch
sec-0176-backup-preserve-backup-dir-while-creating-it.patch
sec-0177-rrsync-pin-receiver-option-directories-the-peer-can-pivot.patch
sec-0178-syscall-guard-do-mknod-atfd-s-mknodat-with-have-mknodat.patch
sec-0179-fileio-coalesce-sparse-writes-instead-of-1-kib-dribbles-issu.patch
sec-0180-fileio-keep-punching-interior-holes-on-the-matched-inplace-p.patch
sec-0181-io-use-poll-instead-of-select-to-avoid-an-fd-setsize-hang-is.patch
sec-0182-io-socket-address-review-of-the-poll-conversion.patch
sec-0183-io-describe-the-timeout-guards-in-terms-of-poll-not-select.patch
sec-0184-build-require-poll-h-not-just-poll.patch
CVE-2026-70454-rsync-ssl-testsuite-quote-paths-interpolated-into-shell-text.patch
CVE-2026-70464-daemon-bound-the-pre-transfer-handshake-with-a-timeout.patch
CVE-2026-53786-exclude-don-t-hand-a-merge-file-s-contents-back-to-the-peer.patch
sec-0188-rrsync-refuse-a-peer-selected-debug.patch
sec-0189-exclude-give-the-e-self-exclude-rule-its-merge-rule-s-proven.patch
CVE-2026-53783-rsync-add-confine-root-bounding-operator-path-resolution.patch
CVE-2026-53783-rrsync-confine-the-server-s-path-resolution-to-the-restricte.patch
sec-0192-generator-fall-back-to-a-copy-when-the-destination-cannot-ha.patch
sec-0193-simd-stop-the-avx2-rolling-checksum-reading-past-its-buffer.patch
sec-0194-testsuite-run-the-simd-checksums-against-an-unreadable-page.patch
sec-0195-socket-don-t-let-socketpair-tcp-hang-in-accept.patch
sec-0196-socket-don-t-let-open-socket-out-hang-in-connect.patch
sec-0197-configure-avoid-runtime-ipv6-availability-probe.patch
sec-0198-options-fix-safe-arg-uninitialized-byte-leak-in-filename-mod.patch
sec-0199-testsuite-declare-the-newer-suite-tests-this-branch-cannot-r.patch
sec-0200-testsuite-fix-the-two-macos-cells-the-3-5-0-fleet-run-flagge.patch
