0001-Enforce-trailing-0-when-receiving-xattr-name-values.patch
0001-Ignore-protect-args-when-already-sent-by-client.patch
0002-Check-fname-in-recv_files-sooner.patch
0003-Sanitize-xname-in-read_ndx_and_attrs.patch
0004-Check-daemon-filter-against-fnamecmp-in-recv_files.patch
CVE-2016-9840.patch
CVE-2016-9841.patch
CVE-2016-9842.patch
CVE-2016-9843.patch
backup-dir-implies-backup.diff
copy-devices.diff
fix-test.diff
logdir.diff
manpage-compress-level.diff
noatime.diff
ssh-6-option.diff
time-limit.diff
salsa.patch

# v3.2.7-sec-patches 2026-05-20 - fixes and hardening
#v3.2.7-sec-patches/0001-Fix-warning-about-conflicting-lseek-lseek64-prototyp.patch  # Warning fix
#v3.2.7-sec-patches/0002-hlink-Fix-function-pointer-cast-in-qsort.patch  # Warning fix
#v3.2.7-sec-patches/0003-bool-is-a-keyword-in-C23.patch  # Warning fix
#v3.2.7-sec-patches/0004-Fix-warning-about-missing-bomb-.-prototype.patch  # Warning fix
#v3.2.7-sec-patches/0005-Some-checksum-buffer-fixes.patch  # Hardening, requires xfer_sum_len changes 7e2711bb2b4b30bc842dd8670c34a87e2ca0c2df
#v3.2.7-sec-patches/0006-Another-cast-when-multiplying-integers.patch  # Id.
v3.2.7-sec-patches/0007-prevent-information-leak-off-the-stack.patch
v3.2.7-sec-patches/0008-refuse-fuzzy-options-when-fuzzy-not-selected.patch
v3.2.7-sec-patches/0009-added-secure_relative_open.patch
v3.2.7-sec-patches/0010-receiver-use-secure_relative_open-for-basis-file.patch
v3.2.7-sec-patches/0011-disallow-.-elements-in-relpath-for-secure_relative_o.patch
v3.2.7-sec-patches/0012-Refuse-a-duplicate-dirlist.patch
v3.2.7-sec-patches/0013-range-check-dir_ndx-before-use.patch
v3.2.7-sec-patches/0014-make-safe-links-stricter.patch
v3.2.7-sec-patches/0015-fixed-symlink-race-condition-in-sender.patch
#v3.2.7-sec-patches/0016-syscall-fix-a-Y2038-bug-by-replacing-Int32x32To64-wi.patch  # Code not present
v3.2.7-sec-patches/0017-options.c-Fix-segv-if-poptGetContext-returns-NULL.patch
v3.2.7-sec-patches/0018-Using-a-correct-time-in-log-file.patch
#v3.2.7-sec-patches/0019-configure.ac-check-for-xattr-support-both-in-libc-an.patch  # Compilation fix
v3.2.7-sec-patches/0020-util-fixed-issue-in-clean_fname.patch
v3.2.7-sec-patches/0021-testsuite-added-clean-fname-underflow-test.patch
v3.2.7-sec-patches/0022-fixed-an-invalid-access-to-files-array.patch
v3.2.7-sec-patches/0023-fix-uninitialized-buf1-in-get_checksum2-MD4-path.patch
v3.2.7-sec-patches/0024-reject-negative-token-values-in-compressed-stream-re.patch
v3.2.7-sec-patches/0025-acl-fixed-ACL-ID-mapping-for-non-root.patch
#v3.2.7-sec-patches/0026-fix-uninitialized-mul_one-in-AVX2-checksum-and-add-S.patch  # ASM not present
#v3.2.7-sec-patches/0027-Fix-glibc-2.43-constness-warnings.patch  # Warning fix
#v3.2.7-sec-patches/0028-zlib-convert-K-R-function-definitions-to-ANSI-style.patch  # Warning fix
#v3.2.7-sec-patches/0029-fix-signed-integer-overflow-in-proxy-protocol-v2-hea.patch  # HAProxy code not present
#v3.2.7-sec-patches/0030-zero-all-new-memory-from-allocations.patch  # Reverted at 0078 due to regression
v3.2.7-sec-patches/0031-xattrs-fixed-count-in-qsort.patch
v3.2.7-sec-patches/0032-call-tzset-before-chroot-to-cache-timezone-data.patch
#v3.2.7-sec-patches/0033-testsuite-xattrs-ignore-SUNWattr_-in-the-Solaris-xls.patch  # Solaris
v3.2.7-sec-patches/0034-syscall-use-openat2-RESOLVE_BENEATH-on-Linux-for-sec.patch
openat2-1.patch
v3.2.7-sec-patches/0035-syscall-also-use-O_RESOLVE_BENEATH-on-FreeBSD-and-Ma.patch
v3.2.7-sec-patches/0036-testsuite-skip-symlink-dirlink-basis-on-platforms-wi.patch
v3.2.7-sec-patches/0037-syscall-clientserver-am_chrooted-and-use_secure_syml.patch
v3.2.7-sec-patches/0038-sender-fix-read-path-TOCTOU-by-opening-from-module-r.patch
v3.2.7-sec-patches/0039-syscall-receiver-secure-receiver-side-do_chmod-again.patch
v3.2.7-sec-patches/0040-util1-secure-change_dir-against-symlink-race-chdir-e.patch
v3.2.7-sec-patches/0041-syscall-add-symlink-race-safe-do_-_at-wrappers-and-h.patch
v3.2.7-sec-patches/0042-util1-syscall-secure-copy_file-source-dest-opens-bar.patch
v3.2.7-sec-patches/0043-testsuite-end-to-end-regression-test-for-chdir-symli.patch
v3.2.7-sec-patches/0044-token-harden-compressed-token-decoding-against-integ.patch
v3.2.7-sec-patches/0045-testsuite-cover-refuse-options-compress-for-the-daem.patch
v3.2.7-sec-patches/0046-receiver-add-parent_ndx-0-guard-mirroring-797e17f.patch
#v3.2.7-sec-patches/0047-clientserver-fix-hostname-ACL-bypass-when-using-daem.patch  # 'daemon chroot' introduced in v3.1.3
v3.2.7-sec-patches/0048-defence-in-depth-bound-wire-supplied-counts-and-leng.patch
v3.2.7-sec-patches/0049-defence-in-depth-guard-cumulative-snprintf-against-l.patch
v3.2.7-sec-patches/0050-defence-in-depth-receiver-block-index-bounds-read_de.patch
#v3.2.7-sec-patches/0051-CI-added-workflows-from-master-for-backport-testing.patch  # CI
v3.2.7-sec-patches/0052-exclude-fix-crashes-with-fortified-strlcpy.patch
#v3.2.7-sec-patches/0053-testsuite-use-integer-sleep-in-clean-fname-underflow.patch  # Solaris
#v3.2.7-sec-patches/0054-ci-update-RSYNC_EXPECT_SKIPPED-for-3.2.7-backport-ba.patch  # CI
v3.2.7-sec-patches/0055-popt-fix-poptDupArgv-strlcpy-size-argument.patch
#v3.2.7-sec-patches/0056-testsuite-fixes-for-3.2.7-backport.patch  # CI + non-Linux testsuite fixes + code not present
v3.2.7-sec-patches/0057-rsync.h-lower-MAX_WIRE_DEL_STAT-to-avoid-signed-int-.patch
v3.2.7-sec-patches/0058-socket-reject-over-long-proxy-response-line.patch
v3.2.7-sec-patches/0059-main-reject-hyphen-prefixed-remote-shell-hostnames.patch
v3.2.7-sec-patches/0060-util1-handle-out-of-range-times-in-timestring.patch

# v3.2.7-sec-patches 2026-06-08 - regression fixes
v3.2.7-sec-patches/0061-receiver-fix-absolute-partial-dir-delta-resume-false.patch
v3.2.7-sec-patches/0062-flist-accept-the-missing-args-mode-0-entry-in-recv_f.patch
v3.2.7-sec-patches/0063-sender-open-a-module-root-absolute-path-for-a-path-m.patch
v3.2.7-sec-patches/0064-syscall-receiver-honour-a-relative-alt-basis-dir-on-.patch
#v3.2.7-sec-patches/0065-generator-cap-block-s2length-at-the-negotiated-check.patch  # Follow-up to 0005-Some-checksum-buffer-fixes.patch
#v3.2.7-sec-patches/0066-build-fall-back-to-do_mknod-when-mknodat-is-unavaila.patch  # Darwin
v3.2.7-sec-patches/0067-daemon-un-backslash-escaped-option-args-829.patch
#v3.2.7-sec-patches/0068-fix-install-generated-manpages-out-of-tree.patch  # Installation change
v3.2.7-sec-patches/0069-token-drain-the-matched-block-insert-deflate-951.patch
#v3.2.7-sec-patches/0070-fix-daemon-upload-delete-stats.patch  # Bug fix
#v3.2.7-sec-patches/0071-main-fix-mkpath-dry-run-file-to-file-copy-880.patch  # no --mkpath support
v3.2.7-sec-patches/0072-Always-clear-st-out-and-validate-nanoseconds-before-.patch
#v3.2.7-sec-patches/0073-fix-update-skips-different-file-type.patch  # Bug fix, not a recent regression
v3.2.7-sec-patches/0074-build-openat2-autodetect-android-probe-R1-924-905-90.patch
openat2-2.patch
v3.2.7-sec-patches/0075-receiver-fix-NULL-deref-on-the-delta-discard-path.patch
v3.2.7-sec-patches/0076-build-add-check-progs-target-for-fleettest.patch
v3.2.7-sec-patches/0077-syscall-honour-open-noatime-in-do_open_nofollow.patch
#v3.2.7-sec-patches/0078-alloc-revert-zero-all-new-memory-from-allocations-95.patch  # Reverted patch not applied
v3.2.7-sec-patches/0079-Fix-FLAG_GOT_DIR_FLIST-collission-with-FLAG_HLINKED.patch
#v3.2.7-sec-patches/0080-t_stub-give-test-helpers-an-unlimited-max_alloc.patch  # No memory helpers yet
#v3.2.7-sec-patches/0081-ci-run-the-v34-stable-testsuite-regression-suite-aga.patch  # CI
