rsync v3.5.1 released

By SecBurg

rsync is the classic Unix tool for fast, incremental file transfer and synchronization, widely used for backups, mirroring and deployment over SSH or its own daemon protocol.

v3.5.1 is a fast-follow release fixing regressions introduced by the big 3.5.0 security overhaul, plus a small enhancement.

BUG FIXES:
- Fixed several path-handling regressions from 3.5.0. Explicit sender paths
  can again traverse symlinked ancestors without weakening confinement of
  paths found during recursive scans. Local and remote-shell --files-from
  paths are handled as operator-supplied paths rather than paths beneath the
  transfer root.
- Fixed access to /dev/stdin, /dev/stdout, /dev/stderr and /dev/fd/N
  when they refer to pipes or descriptors inside user namespaces. Reading
  batch data from a FIFO or process substitution works again.
- Restored --max-alloc=0 as a spelling for the parser's maximum allocation
  limit rather than disabling that limit.
- Fixed restricted-root paths in rrsync and detection of an inetd connection
  when a daemon is started with a local socket on standard input, as can
  happen under ADB without a PTY.
- Allowed --contimeout for daemon connections made through --rsh without
  applying it to ordinary remote-shell transfers.
- Tightened validation of partial-directory state and alternate-destination
  paths on the receiver. An alternate-destination leaf symlink is no longer
  followed as a basis file.
- Fixed undefined shifts in the bundled zlib code and a FreeBSD amd64 build
  failure involving the assembly and SIMD objects.

ENHANCEMENTS:
- Added support for internationalised domain names when the required library
  is available at build time.
- Added the number of 4 KiB logical blocks touched to --stats. This counts
  distinct logical file regions written by the receiver, not physical disk
  blocks or disk I/O. It is reported when both peers negotiate protocol 33.

The protocol number was bumped to 33 for the new block-statistics support. If you upgraded straight to 3.5.0, this patch release is worth grabbing to undo the path-handling side effects it introduced.

Full changelog: NEWS file

Happy syncing! :-)