Mushure megore nehafu yebudiriro, kuburitswa kweRsync 3.2.4 kunowanikwa, faira kuwiriranisa uye backup utility inobvumidza iwe kudzikisa traffic nekuwedzera kukopa shanduko. Iyo yekufambisa inogona kuve ssh, rsh kana proprietary rsync protocol. Iyo inotsigira kurongeka kweasingazivikanwe rsync maseva, ayo akanyatsokodzera kuti ave nechokwadi chekuenderana kwezvionioni. Iyo kodhi yeprojekiti yakagoverwa pasi peGPLv3 rezinesi.
Pakati pezvakawedzerwa shanduko:
- Nzira itsva yekudzivirira nharo dzemutsara wemirairo yakatsanangurwa, yakafanana neyakambowanikwa "--protect-args" ("-s") sarudzo, asi haisi kutyora kushanda kwe rrsync script (yakarambidzwa rsync). Dziviriro inosvika pakupukunyuka mavara akakosha, kusanganisira nzvimbo, paunenge uchitumira zvikumbiro kune muturikiri wekuraira wekunze. Iyo nzira itsva haipukunyuke mavara akakosha mukati mechivharo chakataurwa, izvo zvinokutendera iwe kuti ushandise akareruka quotation mamaki kutenderedza zita refaira pasina kumwe kupukunyuka, semuenzaniso, murairo "rsync -aiv host:'a simple file.pdf' yava kugamuchirwa .β Kudzosa maitiro echinyakare, iyo "-old-args" sarudzo uye "RSYNC_OLD_ARGS=1" nharaunda inosiyana inotsanangurwa.
- Yakagadzirisa nyaya yagara iripo nekubata mavara edecimal point zvichienderana nenzvimbo yazvino ("," pachinzvimbo che "."). Kune zvinyorwa zvakagadzirirwa kugadzirisa chete "." munhamba, kana kukanganisa kuenderana, unogona kuseta nzvimbo ku "C".
- Yakagadziriswa kusagadzikana (CVE-2018-25032) mune kodhi inosanganisirwa kubva kuraibhurari yezlib inotungamira kune buffer kufashama paunenge uchiedza kudzvanya yakanyatsogadzirirwa hunhu kutevedzana.
- Yakaita iyo "--fsync" sarudzo yekudaidza iyo fsync () basa pane yega faira mashandiro ekutsvaira dhisiki cache.
- Iyo rsync-ssl script inoshandisa iyo "-verify_hostname" sarudzo paunowana openssl.
- Yakawedzerwa "--copy-devices" sarudzo yekukopa mafaira emudziyo semafaira enguva dzose.
- Yakaderedzwa ndangariro kushandiswa kana uchiwedzera kufambisa nhamba huru yemadhairekitori madiki.
- Papuratifomu yeMacOS, iyo "-atimes" sarudzo inoshanda.
- Yakaita kugona kugadzirisa xattrs hunhu hwemafaira ari mukuverenga-chete modhi kana mushandisi aine mvumo yekuchinja kodzero dzekuwana (semuenzaniso, kana uchimhanya semidzi).
- Yakawedzerwa uye inogoneswa nekusarudzika iyo "--info=NONREG" paramende kuratidza yambiro nezve kuendesa akakosha mafaera.
- Iyo rrsync (yakarambidzwa rsync) script yakanyorwazve muPython. Yakawedzera sarudzo nyowani "-munge", "-no-lock" uye "-no-del". Nekumisikidza, kuvharira kweiyo --copy-links (-L), --copy-dirlinks (-k), uye --keep-dirlinks (-K) sarudzo inogoneswa kuita kuti kurwiswa kunoshandisa symlinks kune madhairekitori kuome.
- Iyo atomic-rsync script yakanyorwa patsva muPython uye yakawedzerwa kuti irege kufuratira asiri-zero makodhi ekudzoka. Nekumisikidza, kodhi 24 inofuratirwa kana mafaera arasika apo rsync iri kushanda (semuenzaniso, kodhi 24 inodzoserwa kune yechinguva mafaera aivepo panguva yekutanga indexing asi akadzimwa nenguva yekutama).
- Iyo munge-symlinks script inonyorwazve muPython.
Source: opennet.ru