• Bug#1106088: rsync: 'failed verification -- update discarded' involving

    From Lucas Nussbaum@21:1/5 to All on Mon May 19 16:30:01 2025
    Package: rsync
    Version: 3.2.7-1+deb12u1
    Severity: serious
    Justification: renders package unusable in common use cases (backup server) Control: notfound -1 3.2.7-1
    Control: found -1 3.2.7-1+deb12u2
    Control: notfound -1 3.3.0+ds1-2
    Control: found -1 3.3.0+ds1-3
    Control: found -1 3.4.1+ds1-3
    Control: affects dirvish

    Hi,

    I ran into this problem after upgrading a system from Debian 11 to
    Debian 12, and trying to back it up using dirvish (that uses rsync with --link-dest).

    A minimal reproducer is attached, to be executed with:
    # rsync -vlr --link-dest=/path-to/link-dest/ root@localhost:/path-to/source/ /path-to/dest/

    This fails with:
    ---------------------------------------->8
    receiving incremental file list
    created directory /root/rsync/dest
    libcrypt-dev/
    libcrypt-dev/TODO.md.gz
    WARNING: libcrypt-dev/TODO.md.gz failed verification -- update discarded (will try again).
    libcrypt-dev/copyright
    WARNING: libcrypt-dev/copyright failed verification -- update discarded (will try again).
    libcrypt-dev/other_file_in_both
    libcrypt-dev/other_file_in_source
    libcrypt-dev/TODO.md.gz
    ERROR: libcrypt-dev/TODO.md.gz failed verification -- update discarded. libcrypt-dev/copyright
    ERROR: libcrypt-dev/copyright failed verification -- update discarded.

    sent 499 bytes received 7,860 bytes 16,718.00 bytes/sec
    total size is 8,292 speedup is 0.99
    rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1852) [generator=3.4.0]
    ---------------------------------------->8

    I don't fully understand the issue (why does it affect TODO.md.gz and copyright, but not 'other_file_in_both'?)

    I bisected using snapshot.d.o. The problem was introduced between 3.2.7-1 and 3.2.7-1+deb12u1, or between 3.3.0+ds1-2 and 3.3.0+ds1-3. It affects the
    version in testing.

    I wondered about severity:important vs severity:serious, but decided for serious since I did not understand the impact of this issue (due to not understanding the issue).

    Workarounds include hacking the 'link-dest' dir to remove the
    problematic files.

    Lucas


    -- System Information:
    Debian Release: 13.0
    APT prefers testing
    APT policy: (500, 'testing')
    Architecture: arm64 (aarch64)

    Kernel: Linux 6.12.22-arm64 (SMP w/4 CPU threads)
    Kernel taint flags: TAINT_CRAP
    Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
    Shell: /bin/sh linked to /usr/bin/dash
    Init: systemd (via /run/systemd/system)
    LSM: AppArmor: enabled

    Versions of packages rsync depends on:
    ii init-system-helpers 1.68
    ii libacl1 2.3.2-2+b1
    ii libc6 2.41-7
    ii liblz4-1 1.10.0-4
    ii libpopt0 1.19+dfsg-2
    ii libssl3t64 [libssl3] 3.5.0-1
    ii libxxhash0 0.8.3-2
    ii libzstd1 1.5.7+dfsg-1
    ii lsb-base 11.6
    ii sysvinit-utils [lsb-base] 3.14-4
    ii zlib1g 1:1.3.dfsg+really1.3.1-1+b1

    rsync recommends no packages.

    Versions of packages rsync suggests:
    ii openssh-client 1:10.0p1-5
    ii openssh-server 1:10.0p1-5
    ii python3 3.13.3-1
    pn python3-braceexpand <none>

    -- no debconf information
    Thank you for using reportbug

    H4sIAAAAAAAAA+xZCVgT1/aHWkURlxa1WKlcRVlsEgghgLiCCCIIKCDgFifJJBmYzMSZCRBQ RK211lIX6lK1VsQFFxC3Wq24oLbigqBVXHCFiuKORbG09d1JSEhC1Od7vr7/+/6djy9k7r3n nN9Z77k3OEYkcaUozXhY/cceT/j4CoXa//Ax/6/9zhd68r18BHyBD9/Kk8/39va2AsL/HKTm R00zCAWAFUWSzKvWvW7+f/TBDf7HMbGE0qgY+Jb8dmVo/e/r+2r/e3sKfPlCvsAbruMLfQQC K+Clh8R/u3hMnr/9b+Z//luvBG+Q/wKhjzf0v0Dg83f+/yWPJf9LSJWGwuSKt6Uv62AfWNAt +x8621Ngnv8Cvq8V8HxL8l/5/D/3f4wCowH8YxQoCELFGEKAkIhYj3CMUKcCFYWqEEkSIkel IBmlaIwkACkDMFJStaHCs7UNZYACoYEYRQlgWCvWgFEIJSGB1DWUoTAwUCkdirMceRgzGBJF wujCCAQHNKmmJCgNUlAKBaSYQTACkssoUulvq2AYFe3v4SHHGIVazJOQSg8xStMo5eflYUAA eRF63LSGZlClThW4WoWjDAoYNJVhMbODOCZBCRqKk8DVYhTISDUhBRhh66GmKQ9agVAojH2l kiS4+qUeAMK1dYYiIDYcYjPkBkAgrW4ZRsghFxlJKRGGNRH8BowQxkDRJDQfguN6CKZL9PaH hgfhWhVBCEqwBCBKLYYktuE6Mo7BC148PnAjKQ5AGKCBRgSkihUN3wkNwBEGsmha6j4A0Chq y/KXQQ3AsMiohNCIEF54aKAWhXZCDaFBGmg8rakgniagUPtRLEuMkGLJmFQNIbFcaABtBaD1 oBwScqAMtuUBoA0prSwVRUIidjVhixHJKMGQlEbvjWZLKkgcMqKNLIpqgbAG00nDCJbEVhcu gKFQFMoJhuhpFSrBZJjEyBM6PSQkQatxBuj11lpYSaN4MsRoawv6gWEG+TEKkoKhQ4AwdZI6 iQMCEw9/RxFgOOsJDhgHoxrEoRghRin5ABAeEhUO3JJZB7A+ZE3t7m8LANBlhISj+8KFZYXB JM3vcggPwVuOq0iK4SnMEAVDDUE0KWNSWDsHs3GK6PwbSkh4rwWh0DMnxTTJpkHziFIqhLLZ pQws+lwxImVRsXC077pFBEkQMCR4EjNYQQh0JwhUUxQ0FgpTAIdYBFwJjqhhTAdGB2kxILic 3VFYmfqvEsNXLoOIce2IAa5+heGlGTYchXYzodNC0qUFkJJKWDE4IIXCGNZ/sO7E4hQmUYAg WLlUMCx1IJtNw4VZ7iX0MXKTAhHyvV7LNprE4S4RhNKYnDBly+qllHrrtWW/SvRfhc2jQhON xWbB0hQcZm7QrzLzgikWDpyBtRVEoZQES0bwAcDTkkM0KK1jqitweoyGYRUMIraCvbE0L0vS mq1s9KYwFWn+ziW1FmkBGJZ1FFYfhGiRJf8sFNbBCo7xm7mSATiaimqglnJGAzMu+SW85CTN CLz5fK4XbFa5bIkxaGE+RaFGuliYtEgG91sJgkvgpGVKCpW1MMJYjEFwDRimwJLUBJlsWr1e EgymXBVKRKJ3lYUZhVHcstPNDtRHawtC4wrzcnlGkW7O10DdFAKWE4H1GqLdg6JQGtcgSRbU NWBo5v46Lq814StB/VO0zUmo01KBSpJMCwDsX+CuBXcLiiTkUAEMoY3tot9NCAZ2XwoDGQ13 MphIakasljUPsnskgkMpCMXVSTHDPAqWTATFQSCFwoJHJeEYKmZz3VgXQ71vkRlNe0YTEjPW ZrvnS4hpNaEtka+rwgyajIIxKNyEzCowzGu+Ubnhs/llcL1u0gzYSDWBsTtEBMqkkFQSrd9a W2xnTfVRnCSV8Q1yLAy+Mg4slhM2EUyQNw8Ywzda9hr7mBjb2ERiDYOSFIxxljEFo51UskO0 IUaaF0hMskaroQGBtqab9A4wXmDPZb5vIVKEkjczl6OMTiZXBls6MQRpFsv6aYyA0SdDJGhz 7GqUYhKntfmAMDxa0Uymn4K9CKKEqtAKM5qmTquJRqzGcCkXUad6sB2FDiiksDSsY8BlG2iu JWLDTZkSURlzoJMwFReTceFeIuHqjgNclKJgm27KIy1FBBNaTihhQ8xTenNMp3SwRQgbONrp FsS67ZCAJ4WW1LhUlEIhKjjxqkTUttqvbDIHsFJ1XaaguceE0QZPYyBAzZBw95MBNFWCag8e /i01hGuUJIwowoKKGHs6E0G5BIweuiXYgckMe7KBtUp3bCQp+eCXFtMW+5H5sBnzMDQZtg3D IDI0CUUHgODoYLgJ4GwjocRoGoMlpum8ZaYVkirSVmpRMuSMqZiWuEchCMXmYiBJKxGCfjPe COxYCamoqfSLZDhiyTQhakxKglgebHERBYopOS2Esoz/BbmsPDNXGRQ2xmRBaywJxg+lYY9f bLF7E+EUOkWNUahIisrYs39L5tESkoHVmk1xWPmVBEIwHHgQIUAE3LRgmpOEUah6vXmoqpLk Igw2crAySTFK1FRoWsCIwZQghoS9MPGGAcPyg/o1ncZbMo5SYDimAnEQLAExvBl32PbKKYwN GtZNFozHbpgECOGBkaSCoNnchqbD4FY/ht3yKSmc+vcyHYJQMQoKRSy4LhiWdQnMQhJEI+y5 m4FQsTdTUEWRcpFKwyhI4uUmDCCkFJrCHgdg4/KG8dfEG1YqNY62ZK2/mlATSQSZAs1HkIAt 0Chbu3V3YboLHTf2skJ3s0GjrJTmaxLof8MVFFufaDXGoNoKDBOZIBn2rgKaRqxmr6tI7UUH pG+KSZS9EhFTCHtvQgGMoYEC2hpCcjdtb6VGm7nhHApRSRGt17Tym+dgq+Vu2qLrTqgmPVPT Cc54SHt2MqmyUpRu2a8bMzM/dpsOCk0PC+xBX4LQussDw4j+OiCdI6KmGXUV+jOzmXR9J2pB eyPM7i0OGU096BuSmfSAr6HVBhd7HRgxPC5ad0XGtgkoBQ9wbBDorj+1V1YwlskU9jrL6MJR 2xFA3rS/LQsCGMWpl6enF4f9FGg/vUG0Ono40N3iBoRwQAhMBYTQWCATagn8tJ/94QefD6Jj WdrQiNh4EEXBxJDAqAtRike8gg1faNLwavHFsKmgu9pVorBss8EN9xqoqy7KDYGNwDwBKTDV UNibam8ToQcJloXhek+XTTAD2Osy1gSsfbWDPNv/9hX6//Rj6fcf7Y2uiLUu3BlF7AoRu+Jf lvHq339Mf/8TCOE6GE8C779///krHkv+j4kMiuQppTx52tuR8Rr/ewu8hezvf3xvL18+63hY TTx9Pf/2/1/xOM1rq/3/Tqtp8ZcJxz1dp1bEdW7s045OSLI/rJrZdv/QSb3u7kI0C+ccLT78 QPZMtWHFvQV4SZXri+DM6prf+270l87/8bh/G84pJntOzZgNtVElHj22pvXITpx2cE6t5KOn Ev+EjKprJSWN+Vkam4wK/69LbRpLvDctX0T1nP/NGWJr8nnh8d2Jdt3an5n0vGxZof+eiNqI wzM/nY3hk1eP/uDaZl913eJ2DQ23S2qrqycUPcoarSZ33s0X8Fe5qQsKFDFV0z1nHRBSUadm Y5uzPy95WpS4b25DOZM+cFfBvNrS9fkjG8vzplAd52/nZjnPqlONl/SYMGp8q8O5oT4JDlsZ 7/kv+jx1Iq4fR2qzP0rPvZf57awpoa53J65d5yQakt4rY/+0P58tjbOrKZrrHuFTUmd1bU8v G/V94vGZ5BGzN81Mru8mv7p89Q9TH4RtXeP0RdrTp+N2nd0Q2W/KnrvVVle8Ewv5dekd5uSO nFQZ9mSGuEooiA2sfHRuTO2+gaJzPc5d6tno0H+RX8PkLtsyV56oy7O5FNW/fNGJH7/Lb9d2 aE5G2gxf3riYuA4uzK/vNrYJ/uP8nLUfX87982jWR3YRh6QnGnPqigLz3ptbtT+g4lDu5MH3 6kKfLXbn2Tmv7MD/wDFAI/9KsH5ubZd5TxM/Dy5Kexz49fyS793qF6xTb133wNbF+X3/LOep 8+QzdzkJCzVWwYujz47/LfG3JXfGdbKacGFzvM34WDf/y7NLlerKz2tclNPsf/mE3lWfkrl6 ryCx5tHo63UHM/uO2HN2fV7Gs3Po4PTt05w7f3x00+8/rZzbn1kZvzKWWzt7Qu9id7+dC1PE sya/V735+JHyh9t34Kfy9y+uPbhjqFuw/ZYH912teTf6PPC9dbem6CHO9XHg7OWMiItNn5py KhBb73DjguOgsol3Nl2ryRt0qfKT64ffPz1682ibuVkd237qJH0UFOiHZ3HWMFWKUcrvsxdk Z6cvKh38bYdbth/eORryzcJ3brVt53ZwLv/Ly5lX493rb7VxyK0qXFbc5dDgE6Odi/IL2kXP w3uf6b8ACW9d+u7YY7FDtrtxL7yTsWfByS1j76U+kF+MD+12warabU7QhAoF92MHlVuYAyMq s7a5P6i71Hn82tbp1uvGDZjhu9+5282nCWfjl4x48V7Hx/7M1Yl5B4joD6vO1i/PyN21HE3Y R7nkv3AJi9t8ri93/4oJ269/yDBJP7h/dSt2g6rr89vvJFgvmxycsXhwwhTsRv61jD/uh5/M EVil3xUXbwicdyxrynLEeW5WVh3/y/Xfca/3LfMn1vRPPzQi8iTqNntJdJvt7Zx81p+bLEn9 KOGh1Y8jj3Vf1Lftxc9ynfwnhz67c/i5i+8ne7JnpXptynCa8q27YF72BY+iCs7C2dTY34ec j7yYJECnFfX8RXoqIFJCJjUO4bU64EyFJ677sqfj7+3vPXdzaKh7LmoXNUaYtjq3ZFFeP4ci yfKTISvqewUWFAKb1LF57suuViaG2OddWD3rXnnopM3OhWuVnrJfhu3+1GXIpOkvUqc9ll5Z 0WWpWy3xvHN46xGrjme6fD9s6ei5LvKeRxzCPvho5HQ7+22Pn9Q+H3mlYZLN2qpy5zaqPu8e K57R4Ec3uA9cMHnt2ocHbvUeKy1rd2Yk1m9cL87qMOvWP/XYprCnHM9N6eo+s/2d5IHbbgSU +27pUd29AcRcf3dbB3VgtzzP6WXukedW3u5Yv6LfPsfz15MKT2bPq0c6j3ftgvwRWvFDfVHW li1lu99dsmTbQb/MnFLB0bPhOb4JN/pcvJYlcxzVEPHNzMBfB2GOfuf2Lhl45Kf29dYzph8b Lbe6WPmQPopOipcmXGkMrV66q2D3+qtd06r37rh3bEDuuvSHCfZtrXYtce9rt6QAzMhXf3f1 fg1HMqIsR/rtr3OHhxf02vlB4q+DVxfk2jkwNd/aa84OcE/51f6LSnp28fXq2ladApaXp21Y UdonbVdCXoflG/Y86xwZvun0z9TG3svbL5q6dBAyo1XHvoKhpbyw6Im7+9z+0ePWL54ex08H ZCo74xU5Hn2qnS+6j0o5hi9xdJl6sLDryrT69vPSk3K+GVMZpvaX7F37rD585sxOoVfjLgS9 N7piXMaUXq0mlhb5Nk7/GbfR4G4VvQs2xBR+0XDWqdQn/maw3QbHLn6nlsUXDy27/XPFw6W+ e0+dSR31cWB8eTV2RS4869VTlSr/LnXSNmt1kK3qwIX3YzIdfnNtVIxfuHgcYaeoO99mUq81 Q8spxdqNA6+EWg2ZcG9Vq8qjhV90KGfCnRP6Ra52WH+yYmhOqvXiCLr29rP2Xxfuqk2TFv3E CfrMefsT/6htaz3y5qV17vTwlt+HURNHpaXUd5HGFNyYdlKY7lK3zMa62Pl0Zf4lQc6x7WWd 8qL71H3mp3n0g+9WwWqBDS/IdWSg+urc45LMzdaOQ9SXK/NWOj2wP8Ivlh13HbIsdne/s8W+ X5ZmHFh489SkmfdvKr4+0MrJ6Ujfx19suRhyNqGOkq6b7bp/6p8ps0rcP4iJLOwQuFkwa1Yb UqnsJhr8wjXdJpZzrubumNjMbp5b4rvsST7kcaNh4KjF1HHOxoV9RTk2iZPUMqpk48XJa76J /xjrcVOa3demc6Ni+Ziyz8J41ZeLB/b2Gjtm4b64xff9yh9JHN2iO/DGRLjNvxL56b2ia6ca 1u+T9j3kkNlx0Y5t013ceqVs7y07Mv5qCN9V1dblTknb2V51iW7CLXa8ocVLas+dPuDWat2V WRM+PVG8T7L1brHdiZznTzaVprSbcGwAMnHgiZ29PpnaOl+T8aSuLu/880SHDbUpa/ZM4EZO 90+vf+oaOvm9dcP7O9Md9td0n7Cqa8+90+NW5Tr2rPokQVnj2oeeml1EheQzh/M3fzjr8a7f D81Yzskt2pm10K6TfVjHLo/PUJ/ln6632XGpFJ2x5mGcb9zvVdaPOs8rmLJq8ldfy4nPf65O kCwAGwsdqkBkQkDQ6plFv0xJCYge94S7o3L0RRmz82Z+5JNN5yMe1Vy2H78qtGzpjuvWFdlt uw+98dOgwEufn2zXfeaT/lGL2/e2X1cn6hZ1b2KXJaeWLQzt8djvDs/Jc0PW8KMdqfkn/zzc 5cHJ3b03de2x83FKwrNOCvexY11ftCYH0ALf9//LHdb/7ef15z8xfP33ZLz2/Mf3NZz/vL2E sP/35f+jnbPPSRiGAyhHmv1gR/AAHsBM7AyJimFoDKe3W5u4JYWK2N8wvBf+Yg3daPjce1Oa 7/8SNI3bt93jcGs7/ku5NoJSVzD+WJzmfyur+v6jshr/W4K4/uP4Y2b/v3//12a5ZP0lSK2/ tP9va7W4MX7p/ae+NX3/ZY3C/xcB/x//H/8f/z/t/8d73eebf37XfvjebTdkAWQB0lkA5j/m P+Y/5j/mP+b/783/oG13kwIgN+JYDDAePYkC0sN+2ge8mGOJQNiaqQTCoIOhQNh8Ga1APNpD uUA83P9ZDPidLxkNhIefpRuYTJ1IB8ZHXqgeCFNkA4Lb5mG7dv7X6N2He95tTp7gabW6b99f /WttFy1t+UjB70nJTiEuVrlUIUwwf60Q9qNYsBAfvmizEOcgWyBbIFsgWziX1PmfefxvrW3d X/9pOP+jKsX5Hwnwv/G/8b/xv/G/8b/xv/G/8b+vi9T3/6n/HUacM0fW/x73v0P/WVuL/yVC fv0F/P/Kfvv/w++/WnH9Xxkaz4X8FQEAAAAAAAAAAAAAAH/EF5T93dsAeAAA

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)