nixpkgs/pkgs/applications/networking/sync/rsync/base.nix

{ lib, fetchurl, fetchpatch }:

rec {
  version = "3.2.3";
  src = fetchurl {
    # signed with key 0048 C8B0 26D4 C96F 0E58  9C2F 6C85 9FB1 4B96 A8C5
    url = "mirror://samba/rsync/src/rsync-${version}.tar.gz";
    sha256 = "03p5dha9g9krq61mdbcrjkpz5nglri0009ks2vs9k97f9i83rk5y";
  };
  upstreamPatchTarball = fetchurl {
    # signed with key 0048 C8B0 26D4 C96F 0E58  9C2F 6C85 9FB1 4B96 A8C5
    url = "mirror://samba/rsync/rsync-patches-${version}.tar.gz";
    sha256 = "1wj21v57v135n6fnmlm2dxmb9lhrrg62jgkggldp1gb7d6s4arny";
  };
  extraPatches = [
    (fetchpatch {
      name = "CVE-2020-14387.patch";
      url = "https://git.samba.org/?p=rsync.git;a=patch;h=c3f7414;hp=4c4fce51072c9189cfb11b52aa54fed79f5741bd";
      sha256 = "000lyx48lns84p53nsdlr45mb9558lrvnsz3yic0y3z6h2izv82x";
    })
  ];

  meta = with lib; {
    description = "Fast incremental file transfer utility";
    homepage = "https://rsync.samba.org/";
    license = licenses.gpl3Plus;
    platforms = platforms.unix;
  };
}
rsync: add patch for CVE-2020-14387 2021-07-17 23:08:00 +00:00			`{ lib, fetchurl, fetchpatch }:`
rsync/rrsync: less code duplication - refactor the common parts all into the base.nix - add myself as maintainer 2016-02-13 17:50:07 +00:00
(r)rsync: simplify and don't copy maintainers Let's keep the original rsync maintainers only on rsync, as I haven't noticed them wanting to maintain rrsync as well. 2016-02-21 08:59:00 +00:00			`rec {`
rsync: 3.1.3 -> 3.2.3 Add zstd, lz4, openssl and xxHash as optional dependencies, to support more compression formats. 2020-09-29 04:44:42 +00:00			`version = "3.2.3";`
rsync/rrsync: less code duplication - refactor the common parts all into the base.nix - add myself as maintainer 2016-02-13 17:50:07 +00:00			`src = fetchurl {`
			`# signed with key 0048 C8B0 26D4 C96F 0E58 9C2F 6C85 9FB1 4B96 A8C5`
			`url = "mirror://samba/rsync/src/rsync-${version}.tar.gz";`
rsync: 3.1.3 -> 3.2.3 Add zstd, lz4, openssl and xxHash as optional dependencies, to support more compression formats. 2020-09-29 04:44:42 +00:00			`sha256 = "03p5dha9g9krq61mdbcrjkpz5nglri0009ks2vs9k97f9i83rk5y";`
rsync: 3.1.2 -> 3.1.3 The CVE patches weren't previously applied because they depend on the enableCopyDevicesPatch parameter. The naming of the patches attribute in base.nix was misleading. The new rsync release now really fixes: * CVE-2017-15994 * CVE-2017-16548 * CVE-2017-17433 * CVE-2017-17434 2018-01-29 12:39:35 +00:00			`};`
			`upstreamPatchTarball = fetchurl {`
			`# signed with key 0048 C8B0 26D4 C96F 0E58 9C2F 6C85 9FB1 4B96 A8C5`
			`url = "mirror://samba/rsync/rsync-patches-${version}.tar.gz";`
rsync: 3.1.3 -> 3.2.3 Add zstd, lz4, openssl and xxHash as optional dependencies, to support more compression formats. 2020-09-29 04:44:42 +00:00			`sha256 = "1wj21v57v135n6fnmlm2dxmb9lhrrg62jgkggldp1gb7d6s4arny";`
rsync/rrsync: less code duplication - refactor the common parts all into the base.nix - add myself as maintainer 2016-02-13 17:50:07 +00:00			`};`
rsync: add patch for CVE-2020-14387 2021-07-17 23:08:00 +00:00			`extraPatches = [`
			`(fetchpatch {`
			`name = "CVE-2020-14387.patch";`
			`url = "https://git.samba.org/?p=rsync.git;a=patch;h=c3f7414;hp=4c4fce51072c9189cfb11b52aa54fed79f5741bd";`
			`sha256 = "000lyx48lns84p53nsdlr45mb9558lrvnsz3yic0y3z6h2izv82x";`
			`})`
			`];`
rsync/rrsync: less code duplication - refactor the common parts all into the base.nix - add myself as maintainer 2016-02-13 17:50:07 +00:00
treewide: with stdenv.lib; in meta -> with lib; Part of: https://github.com/NixOS/nixpkgs/issues/108938 meta = with stdenv.lib; is a widely used pattern. We want to slowly remove the `stdenv.lib` indirection and encourage people to use `lib` directly. Thus let’s start with the meta field. This used a rewriting script to mostly automatically replace all occurances of this pattern, and add the `lib` argument to the package header if it doesn’t exist yet. The script in its current form is available at https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix 2021-01-11 07:54:33 +00:00			`meta = with lib; {`
rsync: 3.1.2 -> 3.1.3 The CVE patches weren't previously applied because they depend on the enableCopyDevicesPatch parameter. The naming of the patches attribute in base.nix was misleading. The new rsync release now really fixes: * CVE-2017-15994 * CVE-2017-16548 * CVE-2017-17433 * CVE-2017-17434 2018-01-29 12:39:35 +00:00			`description = "Fast incremental file transfer utility";`
treewide: Per RFC45, remove all unquoted URLs 2020-04-01 01:11:51 +00:00			`homepage = "https://rsync.samba.org/";`
rsync/rrsync: less code duplication - refactor the common parts all into the base.nix - add myself as maintainer 2016-02-13 17:50:07 +00:00			`license = licenses.gpl3Plus;`
			`platforms = platforms.unix;`
			`};`
(r)rsync: simplify and don't copy maintainers Let's keep the original rsync maintainers only on rsync, as I haven't noticed them wanting to maintain rrsync as well. 2016-02-21 08:59:00 +00:00			`}`