Rebuilt with updated webpki dependencies
Fix compilation error with recent versions of Rust and / or package dependencies. Fixes FTBFS issues across all currently supported branches of Fedora and on EPEL 9.
Fix CVE-2026-106585: Denial of service via oversized decompressed packets
Rebuilt with rustls v0.23.46
Rebuilt with updated webpki dependencies
Fix compilation error with recent versions of Rust and / or package dependencies. Fixes FTBFS issues across all currently supported branches of Fedora and on EPEL 9.
Rebuilt with updated webpki dependencies
Rebuilt with updated rustls and webpki dependencies, including updated CA certificates for the eMudhra intermediate CA compromise.
Rebuilt with updated webpki dependencies
Fix compilation error with recent versions of Rust and / or package dependencies. Fixes FTBFS issues across all currently supported branches of Fedora and on EPEL 9.
Rebuilt with rustls v0.23.46
Fix CVE-2026-106585: Denial of service via oversized decompressed packets
notes=Update to 0.9.18, which carries the 0.9.17 security fix (GHSA-5xvm-66c9-p5ph) and a fix for a regression in 0.9.17. 0.9.17 was not shipped to this release.
Security: the lock store created directories, wrote holder records and read them back with operations that followed a symbolic link. If the lock-store directory on a backup location was writable by another local account, a planted symlink could redirect those writes and reads; with a backup run as root, as a scheduled backup usually is, that let a less privileged local user steer a root write or read. Locally the lock store now works on O_NOFOLLOW file descriptors, and over ssh each directory component is created with a plain mkdir, records are written under set -C, and a record that is a link or not a regular file is refused.
Breaking: a lock-store directory writable by its group or by everyone is now refused with an error naming the directory and the remedy (chmod go-w <path>). A store created by an earlier version under an interactive umask 002 is mode 0775 and will be refused until tightened; stores created by a root timer or over ssh are 0755 and unaffected. New stores are created 0755 regardless of umask.
0.9.18 fixes the 0.9.17 regression where every exclusive lock on a local btrfs destination on kernel 6.6 or newer failed with "remote lock ... is busy", so a receive or prune into a local btrfs location could not run.
This update includes all changes since 0.9.16.
Advisory: https://github.com/berrym/btrfs-backup-ng/security/advisories/GHSA-5xvm-66c9-p5ph Full changelog: https://github.com/berrym/btrfs-backup-ng/blob/v0.9.18/CHANGELOG.md
Update to 0.9.16.
A .btrfs-backup-ng.locks.holders directory now appears beside each lock file; it is runtime state, and older versions ignore it.
This update includes all changes since 0.9.12.
Full changelog: https://github.com/berrym/btrfs-backup-ng/blob/v0.9.16/CHANGELOG.md
Update to 0.9.15.
This update includes all changes since 0.9.12, including 0.9.13's fixes for systems without sudo, openssl or bash as sh.
Full changelog: https://github.com/berrym/btrfs-backup-ng/blob/v0.9.15/CHANGELOG.md
Update to 0.9.14.
Fixes the test suite failing at startup with pytest older than 8.4 (upstream #121). There are no changes to the program itself. 0.9.14 also includes all of 0.9.13's fixes.
Full changelog: https://github.com/berrym/btrfs-backup-ng/blob/v0.9.14/CHANGELOG.md
Update to 0.9.13.
This release fixes failures on systems without the usual privileges or tools:
Changes you may notice after upgrading:
Packaging: the package now requires lzop (the program used for lzo compression) instead of the lzo library, and the build runs the full test suite, including the compression tests.
Full changelog: https://github.com/berrym/btrfs-backup-ng/blob/v0.9.13/CHANGELOG.md
Update to 0.9.12
notes=Update to 0.9.18, which carries the 0.9.17 security fix (GHSA-5xvm-66c9-p5ph) and a fix for a regression in 0.9.17. 0.9.17 was not shipped to this release.
Security: the lock store created directories, wrote holder records and read them back with operations that followed a symbolic link. If the lock-store directory on a backup location was writable by another local account, a planted symlink could redirect those writes and reads; with a backup run as root, as a scheduled backup usually is, that let a less privileged local user steer a root write or read. Locally the lock store now works on O_NOFOLLOW file descriptors, and over ssh each directory component is created with a plain mkdir, records are written under set -C, and a record that is a link or not a regular file is refused.
Breaking: a lock-store directory writable by its group or by everyone is now refused with an error naming the directory and the remedy (chmod go-w <path>). A store created by an earlier version under an interactive umask 002 is mode 0775 and will be refused until tightened; stores created by a root timer or over ssh are 0755 and unaffected. New stores are created 0755 regardless of umask.
0.9.18 fixes the 0.9.17 regression where every exclusive lock on a local btrfs destination on kernel 6.6 or newer failed with "remote lock ... is busy", so a receive or prune into a local btrfs location could not run.
This update includes all changes since 0.9.16.
Advisory: https://github.com/berrym/btrfs-backup-ng/security/advisories/GHSA-5xvm-66c9-p5ph Full changelog: https://github.com/berrym/btrfs-backup-ng/blob/v0.9.18/CHANGELOG.md
notes=Update to 0.9.18, which carries the 0.9.17 security fix (GHSA-5xvm-66c9-p5ph) and a fix for a regression in 0.9.17. 0.9.17 was not shipped to this release.
Security: the lock store created directories, wrote holder records and read them back with operations that followed a symbolic link. If the lock-store directory on a backup location was writable by another local account, a planted symlink could redirect those writes and reads; with a backup run as root, as a scheduled backup usually is, that let a less privileged local user steer a root write or read. Locally the lock store now works on O_NOFOLLOW file descriptors, and over ssh each directory component is created with a plain mkdir, records are written under set -C, and a record that is a link or not a regular file is refused.
Breaking: a lock-store directory writable by its group or by everyone is now refused with an error naming the directory and the remedy (chmod go-w <path>). A store created by an earlier version under an interactive umask 002 is mode 0775 and will be refused until tightened; stores created by a root timer or over ssh are 0755 and unaffected. New stores are created 0755 regardless of umask.
0.9.18 fixes the 0.9.17 regression where every exclusive lock on a local btrfs destination on kernel 6.6 or newer failed with "remote lock ... is busy", so a receive or prune into a local btrfs location could not run.
This update includes all changes since 0.9.16.
Advisory: https://github.com/berrym/btrfs-backup-ng/security/advisories/GHSA-5xvm-66c9-p5ph Full changelog: https://github.com/berrym/btrfs-backup-ng/blob/v0.9.18/CHANGELOG.md
Update to 0.9.16.
A .btrfs-backup-ng.locks.holders directory now appears beside each lock file; it is runtime state, and older versions ignore it.
This update includes all changes since 0.9.12.
Full changelog: https://github.com/berrym/btrfs-backup-ng/blob/v0.9.16/CHANGELOG.md
Update to 0.9.15.
This update includes all changes since 0.9.12, including 0.9.13's fixes for systems without sudo, openssl or bash as sh.
Full changelog: https://github.com/berrym/btrfs-backup-ng/blob/v0.9.15/CHANGELOG.md
Update to 0.9.14.
Fixes the test suite failing at startup with pytest older than 8.4 (upstream #121). There are no changes to the program itself. 0.9.14 also includes all of 0.9.13's fixes.
Full changelog: https://github.com/berrym/btrfs-backup-ng/blob/v0.9.14/CHANGELOG.md
Update to 0.9.13.
This release fixes failures on systems without the usual privileges or tools:
Changes you may notice after upgrading:
Packaging: the package now requires lzop (the program used for lzo compression) instead of the lzo library, and the build runs the full test suite, including the compression tests.
Full changelog: https://github.com/berrym/btrfs-backup-ng/blob/v0.9.13/CHANGELOG.md
Update to 0.9.12
Upgrade to upstream release v2.41.6 with security-related patches.
Rebuilt with updated webpki dependencies
Upgrade to upstream release v2.41.6 for security-related changes.
Rebuilt with updated rustls and webpki dependencies, including updated CA certificates for the eMudhra intermediate CA compromise.
Rebuilt with updated rustls and webpki dependencies
Rebuilt with updated webpki dependencies
Fix compilation error with recent versions of Rust and / or package dependencies. Fixes FTBFS issues across all currently supported branches of Fedora and on EPEL 9.
Rebuilt with updated rustls and webpki dependencies, including updated CA certificates for the eMudhra intermediate CA compromise.