Merge pull request #9912 from ThomasWaldmann/rel145

Release 1.4.5

Author: ThomasWaldmann

.github/workflows/ci.yml

@@ -338,11 +338,9 @@ jobs:
               sudo -E pkg install -y rust
               sudo -E pkg install -y git
               sudo -E pkg install -y python310 py310-sqlite3
-              sudo -E pkg install -y python311 py311-sqlite3 py311-pip py311-virtualenv
+              sudo -E pkg install -y python311 py311-sqlite3
               sudo ln -sf /usr/local/bin/python3.11 /usr/local/bin/python3
               sudo ln -sf /usr/local/bin/python3.11 /usr/local/bin/python
-              sudo ln -sf /usr/local/bin/pip3.11 /usr/local/bin/pip3
-              sudo ln -sf /usr/local/bin/pip3.11 /usr/local/bin/pip
               python -m venv .venv
               . .venv/bin/activate
               python -V

docs/changes.rst

@@ -414,8 +414,8 @@ Compatibility notes:
 Change Log
 ==========
 
-Version 1.4.5 (not released yet)
---------------------------------
+Version 1.4.5 (2026-07-19)
+--------------------------
 
 For upgrade and compatibility hints, please also read the "Upgrade Notes" section
 above.
@@ -440,6 +440,8 @@ New features:
 
 Fixes:
 
+- extract: security fixes for CVE-2026-62268 (low severity: attacker would need
+  repository write access and, if the repo is encrypted, also borg key and passphrase).
 - create: do not wrap repository writes in backup_io("read"), #9854
 - Archive.delete: don't reuse msgpack Unpacker after an unpacking failure
 - slashdot hack: fix exclusion of source directory metadata, #9534

docs/conf.py

@@ -68,7 +68,10 @@
 
 # List of patterns, relative to source directory, that match files and
 # directories to ignore when looking for source files.
-exclude_patterns = ['_build']
+# man_intro.rst is only consumed by scripts/make.py's man-page generator (borg(1)),
+# not by Sphinx. Excluding it avoids a duplicate-label warning for its usage_general
+# include, which is also part of the HTML build via usage/general.rst.
+exclude_patterns = ['_build', 'man_intro.rst']
 
 # The reST default role (used for this markup: `text`) to use for all documents.
 #default_role = None

docs/man/borg-benchmark-crud.1

@@ -28,7 +28,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "borg-benchmark-crud" "1" "2026-06-25" "" "borg backup tool"
+.TH "borg-benchmark-crud" "1" "2026-07-18" "" "borg backup tool"
 .SH Name
 borg-benchmark-crud \- Benchmark Create, Read, Update, Delete for archives.
 .SH SYNOPSIS

docs/man/borg-benchmark.1

@@ -28,7 +28,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "borg-benchmark" "1" "2026-06-25" "" "borg backup tool"
+.TH "borg-benchmark" "1" "2026-07-18" "" "borg backup tool"
 .SH Name
 borg-benchmark \- benchmark command
 .SH SYNOPSIS

docs/man/borg-break-lock.1

@@ -28,7 +28,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "borg-break-lock" "1" "2026-06-25" "" "borg backup tool"
+.TH "borg-break-lock" "1" "2026-07-18" "" "borg backup tool"
 .SH Name
 borg-break-lock \- Break the repository lock (e.g. in case it was left by a dead borg.
 .SH SYNOPSIS

docs/man/borg-check.1

@@ -28,7 +28,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "borg-check" "1" "2026-06-25" "" "borg backup tool"
+.TH "borg-check" "1" "2026-07-18" "" "borg backup tool"
 .SH Name
 borg-check \- Check repository consistency
 .SH SYNOPSIS

docs/man/borg-common.1

@@ -28,7 +28,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "borg-common" "1" "2026-06-25" "" "borg backup tool"
+.TH "borg-common" "1" "2026-07-18" "" "borg backup tool"
 .SH Name
 borg-common \- Common options of Borg commands
 .SH SYNOPSIS

docs/man/borg-compact.1

@@ -28,7 +28,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "borg-compact" "1" "2026-06-25" "" "borg backup tool"
+.TH "borg-compact" "1" "2026-07-18" "" "borg backup tool"
 .SH Name
 borg-compact \- compact segment files in the repository
 .SH SYNOPSIS

docs/man/borg-compression.1

@@ -28,7 +28,7 @@ level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
 .in \\n[rst2man-indent\\n[rst2man-indent-level]]u
 ..
-.TH "borg-compression" "1" "2026-06-25" "" "borg backup tool"
+.TH "borg-compression" "1" "2026-07-18" "" "borg backup tool"
 .SH Name
 borg-compression \- Details regarding compression
 .SH DESCRIPTION