[Bug 1877844] Re: [SRU] data corruption issue in all versions before 1.1.11

[Steve Dodd]

I've gone through the upstream bug
https://github.com/borgbackup/borg/issues/4829 and not found any data
which could be used as a test case. While the description of the bug
there is quite detailed, I think one would have to be incredibly
familiar with borg internals & code to create a reproducer.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to xxhash in Ubuntu.
https://bugs.launchpad.net/bugs/1877844

Title:
  [SRU] data corruption issue in all versions before 1.1.11

Status in borgbackup package in Ubuntu:
  Fix Released
Status in xxhash package in Ubuntu:
  Fix Released
Status in borgbackup source package in Xenial:
  In Progress
Status in borgbackup source package in Bionic:
  In Progress
Status in xxhash source package in Bionic:
  In Progress
Status in borgbackup source package in Focal:
  In Progress
Status in borgbackup source package in Groovy:
  Fix Released
Status in xxhash source package in Groovy:
  Fix Released
Status in borgbackup package in Debian:
  Fix Released

Bug description:
  [ Impact ]
  * Data is corrupted on some specific conditions

  [ Regression Potential ]
  * Really low, the package has an autopkgtestsuite that runs thousand of tests, and the fix is since one year part of upstream code

  [ Test Case ]
  * Backup some TB of data, and try to read the index, it should be not corrupted

  [ Other info ]
  Per the "important notes" section of the borg docs:

  https://borgbackup.readthedocs.io/en/stable/changes.html

  "Pre-1.1.11 potential index corruption / data loss issue
  A bug was discovered in our hashtable code, see issue #4829. The code is used for the client-side chunks cache and the server-side repo index.

  Although borg uses the hashtables very heavily, the index corruption
  did not happen too frequently, because it needed specific conditions
  to happen.

  Data loss required even more specific conditions, so it should be rare
  (and also detectable via borg check). [..]"

  Theoretically affects all Ubuntu releases before 20.04 (focal.)

  I know this is a universe package, but if anyone was up for an SRU
  that would be fantastic..

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/borgbackup/+bug/1877844/+subscriptions