When updated a directory with "rsync -KRlptzv --progress", I now get errors like ERROR: public_html/cine/index.fr.html failed verification -- update discarded. ERROR: public_html/cine/perso-lyon.txt failed verification -- update discarded. ERROR: public_html/cine/watch.fr.html failed verification -- update discarded. [...] rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1338) [sender=3.3.0]
This actually occurs with a remote host having rsync 3.2.7-1+deb12u1 (bookworm-security). Downgrading to rsync 3.2.7-1 there solves the problem.
Hi Vincent, Have you more information on the setup which triggers this? Do you have a minimal reproducing case to show the problem? (I might have overseen it but are you using the rsyncd on the remote side or using a remote ssh shell for the transport? Can you paste full command as well, if needed anonyized). Regards, Salvatore
Hi Salvatore, On the Debian bookworm machine (joooj): $ mkdir real-dir $ ln -s real-dir dir On the Debian/unstable machine: $ mkdir dir $ echo foo > dir/file A first rsync from this machine succeeds: $ rsync -KRlptzv dir/file joooj: Connected to joooj (from 2a02:8428:1b1d:4d01:96a9:491d:7b48:ba31) OS: Debian GNU/Linux 12 (bookworm) [x86_64] dir/ dir/file sent 121 bytes received 38 bytes 106.00 bytes/sec total size is 4 speedup is 0.03 But a second one (with the file already created on joooj) fails: $ touch dir/file $ rsync -KRlptzv dir/file joooj: Connected to joooj (from 2a02:8428:1b1d:4d01:96a9:491d:7b48:ba31) OS: Debian GNU/Linux 12 (bookworm) [x86_64] dir/ dir/file WARNING: dir/file failed verification -- update discarded (will try again). dir/file ERROR: dir/file failed verification -- update discarded. sent 147 bytes received 89 bytes 157.33 bytes/sec total size is 4 speedup is 0.02 rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1338) [sender=3.3.0] No rsyncd. BTW, I have an environment variable RSYNC_RSH=/home/vinc17/scripts/ssh But I can reproduce the failure with just RSYNC_RSH=ssh
Control: found -1 3.2.7-1+deb12u1 Control: notfound -1 rsync/3.3.0+ds1-2 [...] The same failure can be reproduced on this machine only: just create the source dir/file on some other subdirectory, e.g. under /tmp. joooj:/tmp> mkdir dir joooj:/tmp> echo foo > dir/file joooj:/tmp> rsync -KRlptzv dir/file localhost: Connected to joooj (from ::1) OS: Debian GNU/Linux 12 (bookworm) [x86_64] dir/ dir/file WARNING: dir/file failed verification -- update discarded (will try again). dir/file ERROR: dir/file failed verification -- update discarded. sent 147 bytes received 89 bytes 157.33 bytes/sec total size is 4 speedup is 0.02 rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1338) [sender=3.2.7] where the home directory still has the dir -> real-dir symlink and an existing real-dir/file file. So the issue comes from the rsync 3.2.7-1+deb12u1 package only.
Hi Vincent, Thanks for the reproducing steps, I can confirm it fails with both the current 3.2.7-1+deb12u1 and with the changes for the other regression as they are in 3.2.7-1+deb12u2. Regards, Salvatore
Hi, And with the steps from https://github.com/RsyncProject/rsync/issues/715 I can as well reproduce the issue with the current unstable version. Regards, Salvatore
While this is an unfortunate regression, it does not 'render the package unusable' in general. Ben.
Patch at https://github.com/RsyncProject/rsync/pull/864. I've uploaded 3.4.1+ds1-8~exp1 to experimental, with this patch. Appreciate any feedback on it. Cheers,
Hi, I will backport this to our server Trixie where we noticed this.
Hello, Bug #1093160 in rsync reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/debian/rsync/-/commit/c4f32e2d8fad806121325926db8b3a190977bdad ------------------------------------------------------------------------ d/p/syscall_use_openat2...: New patch to fix symlink handling on the receiver (closes: #1093160) ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/1093160
We believe that the bug you reported is fixed in the latest version of
rsync, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1093160@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Samuel Henrique <samueloph@debian.org> (supplier of updated rsync package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 30 Apr 2026 09:50:10 -0300
Source: rsync
Architecture: source
Version: 3.4.2+ds1-2
Distribution: unstable
Urgency: medium
Maintainer: Samuel Henrique <samueloph@debian.org>
Changed-By: Samuel Henrique <samueloph@debian.org>
Closes: 1093160
Changes:
rsync (3.4.2+ds1-2) unstable; urgency=medium
.
* d/p/syscall_use_openat2...: New patch to fix symlink handling on the
receiver (closes: #1093160)
Checksums-Sha1:
e38b3307d8d0e220b5a1588b72a90478d61ffa13 2156 rsync_3.4.2+ds1-2.dsc
1a29a6f4a8c8129ad170f21dd1a058c53f7e436e 655380 rsync_3.4.2+ds1.orig.tar.xz
c76c1229801833f8b30a900b357399b9b75c0472 37844 rsync_3.4.2+ds1-2.debian.tar.xz
e3021290b000268f88df83bb681e7bb40e4349b4 6862 rsync_3.4.2+ds1-2_amd64.buildinfo
Checksums-Sha256:
1455d4845be8e7a8f96666328151f80ec982c7c38abae8c4d94740d02a735dc6 2156 rsync_3.4.2+ds1-2.dsc
0cc3e28aa7d2e735ede35f9b49b57171c375215bb533d03df7b795961704476f 655380 rsync_3.4.2+ds1.orig.tar.xz
dc9810cb07dd9d764cbf92227b5afce4c6ec4a9f7f17686422c93dfe971ef96b 37844 rsync_3.4.2+ds1-2.debian.tar.xz
149ec47a8294576d51b85013b8ec2475e44a50e154fe156bb32683992c358328 6862 rsync_3.4.2+ds1-2_amd64.buildinfo
Files:
c1834652f4297cae16f548912290dd42 2156 net optional rsync_3.4.2+ds1-2.dsc
0a90fe592f3ed3ebbd1c45831e6df830 655380 net optional rsync_3.4.2+ds1.orig.tar.xz
21cdaf735f2fb30ef64afd16731f2ddf 37844 net optional rsync_3.4.2+ds1-2.debian.tar.xz
a81ddc87edca8d96e65a6a9b210542f4 6862 net optional rsync_3.4.2+ds1-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=pAxH
-----END PGP SIGNATURE-----
We believe that the bug you reported is fixed in the latest version of
rsync, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1093160@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Samuel Henrique <samueloph@debian.org> (supplier of updated rsync package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 30 Apr 2026 10:05:39 -0300
Source: rsync
Architecture: source
Version: 3.4.1+ds1-5+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: Samuel Henrique <samueloph@debian.org>
Changed-By: Samuel Henrique <samueloph@debian.org>
Closes: 1093160
Changes:
rsync (3.4.1+ds1-5+deb13u2) trixie; urgency=medium
.
* d/p/syscall_use_openat2...: New patch to fix symlink handling on the
receiver (closes: #1093160)
* Add patch for CVE-2026-41035
Checksums-Sha1:
61840aecd8b74687fb2396c2bcdf7a9132991e8d 2224 rsync_3.4.1+ds1-5+deb13u2.dsc
0afa2bd51aad7d236910c4144aa01963cdb4eb3a 646840 rsync_3.4.1+ds1.orig.tar.xz
aca0546d9d22f8a353fc4f9e45a676600c1cb6e7 40620 rsync_3.4.1+ds1-5+deb13u2.debian.tar.xz
60ac34346fe01cc2740359b81927f71b053991d2 6959 rsync_3.4.1+ds1-5+deb13u2_amd64.buildinfo
Checksums-Sha256:
0f80ada223dc21c23620cd84854a518ae3041304532f3faa939be26b5a367874 2224 rsync_3.4.1+ds1-5+deb13u2.dsc
bb9e2dda7e79d9639bc04bdafff6bb0b06a606ed915358b574696384215c9e5c 646840 rsync_3.4.1+ds1.orig.tar.xz
3dec355dba485a786cd94052c453dfe0ffb63f3b1e84871a05a991f52ea2e20d 40620 rsync_3.4.1+ds1-5+deb13u2.debian.tar.xz
ff230621516a16295f78fcc3e0aa52bb5da4078602f5af5642c4f8349c27d8b3 6959 rsync_3.4.1+ds1-5+deb13u2_amd64.buildinfo
Files:
e9bde6c03747026fcb4ee0bf85d0db9c 2224 net optional rsync_3.4.1+ds1-5+deb13u2.dsc
6ed869a0c4012385c8da8cc272cab3b8 646840 net optional rsync_3.4.1+ds1.orig.tar.xz
2cf7b6e2569cc09179c539859a6c841c 40620 net optional rsync_3.4.1+ds1-5+deb13u2.debian.tar.xz
d03a2eaefb95bfeef30a21632d90ae13 6959 net optional rsync_3.4.1+ds1-5+deb13u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEBdtqg34QX0sdAsVfu6n6rcz7RwcFAmn8iv8ACgkQu6n6rcz7
RwdVFQ//W2uvu+OcCqMC2lNCDgIN5A5e12a2umNy6+hZLo/IHjf/5tawXBKzRafb
VseufG6SxY/h8sJap7GB2SPYByVO6f8amkk5o7dh+YBBRfxkjEJYWe2BeCZSwBCd
qB3xrrxZeqDcSIQvfvE3kwJfzDLg0sCzHqjmlZoYtj3bREZ4YDDPmH8FdYiumipq
qa7vmcoZrmOBMquBut8NQPfSds+V95lVWig8BNOaZGFWFq1KuuowEvNl4UwRpCJn
SV0yb9gn3YGfekLgz7Ef5cUvsY8I7g37lDLN8WX/cbApWfJVNdgA5ZLBhe0vWUTR
jYVO/6ra7lFv20BMM8V4h0NWi6862Xz3JC21nU2z0IQgzQOnl+agEGciV3DjW+Hz
z+4cj384fMBcD0CX2Tgv7iz6kNsbZUX+FOz7Fl3FndKTD/ct3y9LLmVUz41UHu2O
wzAiON1wICaOL7dS6Jh8s4Y8QR0/jdtiRfirsp+MZOqIyP+tk4WPs729FNbWqbP8
e3/phZHQmHRaX3mYopFWaKZ13J07O9pHYIlwBMqFD6IFjLtn3tuFbbQkTHF5gm7t
YZs/313+T87J7psL81+7TJKeDHQvToKboya2gyCgA+LcZp6ulV0Bxp8hJSM4XJ3t
JxfnEbXe2WBH0D6cTyH0ELiRCd8mgOdK4scf/7Wx92Bh21QSkBw=
=olE5
-----END PGP SIGNATURE-----
Control: reopen -1 Control: found -1 3.4.1+ds1-5+deb13u2 Control: found -1 3.4.2+ds1-2 Control: found -1 3.4.3+ds1-2 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1093160#22 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1093160#27 but it still occurs on the following sequence: cd "$HOME" mkdir real-dir dir1 ln -s ../real-dir dir1/dir mkdir /tmp/dir cd /tmp echo > dir/file rsync -KRlptzv dir/file localhost:dir1/ touch dir/file rsync -KRlptzv dir/file localhost:dir1/ I get for the second rsync (the first one is fine): $ rsync -KRlptzv dir/file localhost:dir1/ dir/ dir/file dir/file WARNING: dir/file failed verification -- update discarded (will try again). ERROR: dir/file failed verification -- update discarded. sent 146 bytes received 85 bytes 462.00 bytes/sec total size is 1 speedup is 0.00 rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1347) [sender=3.4.3] I've tested the 3 versions mentioned above. But after reverting to 3.3.0+ds1-2, the issue disappears.
[...] It is *not* fixed upstream. The upstream bug was closed because it was assumed to be fixed (based on the testcase), but several users (including me) could still trigger the issue. From the failure I was getting, I provided another simple testcase. So the upstream bug should be reopened, but I do not have the necessary permissions to do that.
Control: tags -1 - fixed-upstream [...] Oops, I forgot to remove the tag. Doing this now.