Now in blog form! "rsync, GUIs, power, control, design, and decisions" https://bits.ashleyblewer.com/blog/2019/06/29/rsync-guis-power-control-design-and-decisions/
So there's a debatable regression in bzip2-1.0.7. It cannot uncompress some files from lbzip2, which worked fine with bzip2-1.0.6, because of the fix for CVE-2019-12900.
Bzip2-1.0.6 and before had a bug with unvalidated input, which a fuzzer found to lead to a buffer overflow.
However, those version seemed to work for lbzip2 files, which (arguably wrongly) were writing the input value larger than bzip2 expected.
https://gitlab.com/federicomenaquintero/bzip2/issues/24 - people who want to do code digging appreciated!
FYI: if you build your own Go compiler, this commit is a must-backport if you’re going to be building binaries targeting macOS, especially macOS 10.15. https://github.com/golang/go/commit/26954bde4443c4bfbfe7608f35584b6b810f3f2c
digipres.club is a space for folks interested in productive conversations about, well, digital preservation! If you enjoy talking about how to do memory work with computers, or even with cardboard boxes of old photos, you belong with us on digipres.club. Many of us are/were Twitter users looking for an inclusive and community supported approach to social media. If any of these things sound good to you, consider joining us now.