Kutulutsidwa kwa ntchito yolumikizira mafayilo Rsync 3.2.4

Pambuyo pa chaka ndi theka lachitukuko, kumasulidwa kwa Rsync 3.2.4 kulipo, kugwirizanitsa mafayilo ndi zosunga zobwezeretsera zomwe zimakulolani kuchepetsa kuchuluka kwa magalimoto potengera kusintha kowonjezereka. Zoyendetsa zitha kukhala ssh, rsh kapena proprietary rsync protocol. Imathandizira kukhazikitsidwa kwa ma seva a rsync osadziwika, omwe ali oyenera kuwonetsetsa kuti magalasi amalumikizana. Khodi ya polojekitiyi imagawidwa pansi pa layisensi ya GPLv3.

Zina mwazosintha zina:

  • Njira yatsopano yotetezera mikangano yamalamulo yaperekedwa, yomwe ikufanana ndi njira yomwe inalipo kale "--protect-args" ("-s"), koma sikuphwanya ntchito ya rrsync script (restricted rsync). Chitetezo chimatsikira pakuthawa zilembo zapadera, kuphatikiza mipata, potumiza zopempha kwa womasulira wakunja. Njira yatsopanoyi siimathawa zilembo zapadera mkati mwa chipika chomwe chatchulidwa, chomwe chimakulolani kugwiritsa ntchito zizindikiro zosavuta kuzungulira dzina la fayilo popanda kuthawa kwina, mwachitsanzo, lamulo "rsync -aiv host:'fayilo yosavuta.pdf' tsopano yaloledwa .” Kuti mubwezere khalidwe lachikale, njira ya "-old-args" ndi "RSYNC_OLD_ARGS=1" zosintha zachilengedwe zikuperekedwa.
  • Tinathetsa vuto lomwe lakhalapo kwanthawi yayitali ndikusamalira zilembo za decimal potengera komwe kuli ("," m'malo mwa "."). Kwa ma script opangidwa kuti azingolemba "." mu manambala, ngati kuphwanya ngakhale, mutha kukhazikitsa malo kukhala "C".
  • Kukonza chiwopsezo (CVE-2018-25032) mu code yophatikizidwa kuchokera ku library ya zlib yomwe imatsogolera pakusefukira kwa buffer poyesa kukakamiza kutsatizana kokonzekera mwapadera.
  • Anakhazikitsa njira ya "--fsync" kuyitana fsync () ntchito pa fayilo iliyonse kuti muchotse cache ya disk.
  • Zolemba za rsync-ssl zimagwiritsa ntchito njira ya "-verify_hostname" mukalowa openssl.
  • Anawonjezera "--copy-devices" njira kukopera mafayilo achipangizo ngati mafayilo wamba.
  • Kuchepetsa kukumbukira kukumbukira pamene mukusuntha mochulukira kalozera kakang'ono.
  • Pa nsanja ya macOS, njira ya "-atimes" imagwira ntchito.
  • Yakhazikitsa kuthekera kosintha mawonekedwe a xattrs pamafayilo owerengera-okha ngati wogwiritsa ali ndi chilolezo chosintha maufulu ofikira (mwachitsanzo, akamayendetsa ngati mizu).
  • Yowonjezedwa ndikuyatsidwa mwachisawawa gawo la "--info=NONREG" kuwonetsa machenjezo okhudza kusamutsa mafayilo apadera.
  • Zolemba za rrsync (zoletsedwa rsync) zidalembedwanso ku Python. Zowonjezera zatsopano "-munge", "-no-lock" ndi "-no-del". Mwachikhazikitso, kutsekereza kwa --copy-links (-L), --copy-dirlinks (-k), ndi --keep-dirlinks (-K) zosankha kumathandizidwa kuti ziwopsezo zomwe zimagwiritsa ntchito ma symlinks kukhala ovuta kwambiri.
  • Zolemba za atomiki-rsync zalembedwanso ku Python ndikuwonjezedwa kuti zisanyalanyaze ma code osabwerera zero. Mwachikhazikitso, code 24 imanyalanyazidwa pamene mafayilo atayika pamene rsync ikugwira ntchito (mwachitsanzo, code 24 imabwezeretsedwa kwa mafayilo osakhalitsa omwe analipo panthawi ya ndondomeko yoyamba koma adachotsedwa nthawi ya kusamuka).
  • Zolemba za munge-symlinks zimalembedwanso ku Python.

Source: opennet.ru

Kuwonjezera ndemanga