Commit Graph

1304 Commits (c4698520ef96ed27dc5f024c41cc24428e26a78c)

Author SHA1 Message Date
mnikulin c4698520ef
Merge 0a8ac177e7 into a47e8b7e0e 2026-07-24 22:38:38 -07:00
Axel Burri a47e8b7e0e Merge tag 'v0.32.7'
Merge branch created for security release v0.32.7 back to master.

Contains fix for CVE-2026-62943, along with cherry-picked minor
bugfixes.
2026-07-19 16:39:09 +02:00
Axel Burri b4676b8418 change version to 0.32.7; update Changelog 2026-07-19 16:16:52 +02:00
Axel Burri 29ca3c0932 ssh_filter_btrbk.sh: fix regex end-of-string anchor
Fix SSH command filter bypass in ssh_filter_btrbk.sh (CVE-2026-62943).

The regex allowlist pattern in ssh_filter_btrbk.sh lacked a proper
end-of-string anchor, allowing attackers to append arbitrary commands
after a valid btrbk command prefix using pipe characters.

Thanks to @machin0r for responsible disclosure.

Bug introduced in commit: 8d0d7edda7
2026-07-19 16:16:39 +02:00
Axel Burri ebcc4bdd03 documentation: fix arch installation 2026-06-27 18:18:24 +02:00
Axel Burri 8c60c53ebb btrbk: fix duplicate cmdline option -l in lsbtr 2026-06-27 18:18:24 +02:00
Axel Burri 973771ed35 btrbk: fix loglevel along with verbose 2026-06-27 18:18:24 +02:00
Axel Burri 59db547c91 documentation: fix stream_compress_adapt 2026-06-27 18:18:24 +02:00
Axel Burri 57f43547cb btrbk-mail: fix spelling 2026-06-27 18:18:24 +02:00
Axel Burri ccec2395b7 documentation: fix spelling 2026-06-27 18:15:11 +02:00
oldherl 3494173cf2 doc: README.md: fix typo 2026-06-27 18:15:11 +02:00
Axel Burri f94d847318 btrbk-mail: add example to enable all rsync 2026-06-27 18:06:43 +02:00
Axel Burri d1a26147cf btrbk-mail: add missing declare 2026-06-27 18:06:43 +02:00
Axel Burri 4e4594516b btrbk-mail: declare associative arrays 2026-06-27 18:06:43 +02:00
Axel Burri 7779db68f1 btrbk: abort if cmdline specified config not found 2026-06-27 18:06:43 +02:00
Axel Burri 1bd4f64a58 documentation: rephrase lockfile 2026-06-27 17:25:09 +02:00
Maksim Nikulin 0a8ac177e7 btrbk: validate snapshot_delete_dir 2026-06-12 08:51:18 +03:00
Maksim Nikulin cff6c47900 btrbk: add support for deleting directories in snapshots and set them read-only 2026-05-31 20:41:52 +03:00
Axel Burri 2bda102f94 documentation: fix arch installation 2025-11-29 17:03:11 +01:00
Axel Burri ba3c36c984 btrbk: fix duplicate cmdline option -l in lsbtr 2025-07-06 01:09:14 +02:00
Axel Burri c69f70e1d0 btrbk: fix loglevel along with verbose 2025-07-06 00:56:29 +02:00
Axel Burri 18ddc65979 documentation: fix stream_compress_adapt 2023-08-28 19:14:35 +02:00
Axel Burri 225f60f565 btrbk: remove handling of deprecated options before v0.23
After 7 years and a lot of warnings we can drop this code. Note that
most of those refer to `upgrade_to_v0.23.0.md`, which was removed in
16364e2.
2023-08-28 18:55:47 +02:00
Axel Burri f7e1265e7a documentation: remove upgrade_to_v0.23.0.md from Makefile
Forgotten after removal in:

   16364e2833 documentation: remove obsolete upgrade_to_v0.23.0.md
2023-08-28 18:42:42 +02:00
Axel Burri a4d4dff0d1 btrbk_restore_raw.py: fix spelling 2023-08-05 20:56:39 +02:00
Axel Burri d819f17e44 kdf_pbkdf2.py: fix spelling 2023-08-05 20:56:39 +02:00
Axel Burri 1807ad5cee btrbk-mail: fix spelling 2023-08-05 20:56:39 +02:00
Axel Burri b139875e2b btrbk: fix spelling 2023-08-05 20:56:39 +02:00
Axel Burri f6bdab143b documentation: fix spelling 2023-08-05 20:56:39 +02:00
Axel Burri 16364e2833 documentation: remove obsolete upgrade_to_v0.23.0.md 2023-08-05 20:56:34 +02:00
Axel Burri efa4d13111 ChangeLog: fix spelling 2023-08-05 20:56:34 +02:00
Yaroslav Halchenko dac6350b5d github: actions: add codespell master on push and PRs 2023-08-05 20:28:41 +02:00
oldherl a488096869 doc: README.md: fix typo 2023-07-14 19:40:18 +02:00
Sam James 9dfee7bc32 doc: allow asciidoc again
This effectively reverts 0e63843195 and
173319e7e1.

asciidoc has been revived (for a while now) and doesn't require Python 2. We
still prefer asciidoctor and fallback to asciidoc/a2x if it's not available.

Comparing the asciidoc and asciidoctor man pages, everything looks OK.

Python tends to be available more readily in distribution build environments
rather than the Ruby stack. Also, the pregenerated man pages are gone as of
f132c94c65.

Signed-off-by: Sam James <sam@gentoo.org>
2023-07-14 18:55:05 +02:00
Axel Burri db45f0b09c btrbk-mail: add example to enable all rsync 2023-07-07 01:53:15 +02:00
Axel Burri fa704c3185 btrbk-mail: add missing declare 2023-07-07 01:45:32 +02:00
Axel Burri b63609c298 btrbk-mail: declare associative arrays 2023-06-08 00:27:16 +02:00
Axel Burri 98580418e3 btrbk: fix displaying excluded in summary
- fix framework
 - print source excluded by archive_exclude in summary
 - fix exclude list in summary
2023-04-22 16:53:13 +02:00
Axel Burri 135edabc71 btrbk: rephrase warnings on unexpected (foreign) location 2023-04-22 16:51:32 +02:00
Axel Burri 4ba944e6a5 btrbk: fix exit status for action usage 2023-04-22 16:51:32 +02:00
Axel Burri dd7149b111 btrbk: improve error message 2023-04-22 16:51:32 +02:00
Axel Burri ed33db523c btrbk: add reason text to filter statements 2023-04-22 16:51:32 +02:00
Axel Burri 15a6b98a08 btrbk: print "create" action in schedule 2023-04-22 16:51:32 +02:00
Axel Burri eff9af34bc btrbk: fix print schedule if deletion is skipped
If deletion is skipped, we don't have a schedule call on the target,
which is used for --print-schedule text. Add some (rather hacky) code
to be able to also use the schedule result of the backup process.
2023-04-22 16:51:32 +02:00
Axel Burri 468ca1eae5 btrbk: tidy logging
Especially corrects $svol->{PRINT} where not applicable.
2023-04-22 16:51:32 +02:00
Axel Burri cca200707d btrbk: set subvolume url to /dev/null on archive
This should not be printed anywhere. If it is, it's a bug.
2023-04-22 16:51:32 +02:00
Axel Burri d4ab986245 btrbk: skip subvolume init on archive 2023-04-22 16:51:32 +02:00
Axel Burri 6f1145c279 btrbk: add archive related summary
Note that "no target action" for archive is replaced by "<no_action>",
for consistency with action run:

   [-] /path/to/target/snapshot_basename.*

is now displayed as:

   <no_action>
2023-04-22 16:51:32 +02:00
Axel Burri 6d047cbaec btrbk: disable target_create_dir for user; fix dryrun 2023-04-22 16:51:32 +02:00
Axel Burri e737927bd9 btrbk: tidy variable names 2023-04-22 16:51:32 +02:00