CVE-2024-52522

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...

CVE-2024-52522 Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...

CVE-2024-52522 Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...

CVE-2024-52522

CVE-2024-52522 affects rclone. Insecure handling of symlinks when copying to local disks with --links and --metadata allows an unprivileged user to indirectly modify ownership/permissions on the symlink targets during a copy performed by a privileged process, potentially enabling privilege escala...

CVE-2024-52522

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...

Rclone 安全漏洞

Rclone is a software from the Rclone team that synchronizes data asynchronously from cloud storage. The software supports Google Drive, Amazon Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Cloudfiles, Google Cloud Storage, Yandex Files and other cloud storage. A security vulnerabilit...

PT-2024-35354 · Rclone +2 · Rclone +2

Name of the Vulnerable Software and Affected Versions: rclone versions prior to 1.68.2 Description: The issue is related to insecure handling of symlinks with --links and --metadata in rclone while copying to local disk. This allows unprivileged users to indirectly modify ownership and permission...

rclone-1.68.1-2.1 on GA media (moderate)

rclone-1.68.1-2.1 on GA media Announcement ID: openSUSE-SU-2024:14495-1 Rating: moderate Cross-References: CVE-2024-51744 CVSS scores: CVE-2024-51744 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2024-51744 SUSE : 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N...

OPENSUSE-SU-2024:14495-1 rclone-1.68.1-2.1 on GA media

These are all security issues fixed in the rclone-1.68.1-2.1 package on the GA media of openSUSE Tumbleweed...

Fedora 41 : rclone (2024-3ef0d3c37d)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-3ef0d3c37d advisory. Automatic update for rclone-1.67.0-1.fc41. Changelog Fri Aug 9 2024 Mikel Olasagasti Uranga - 1.67.0-1 - Update to 1.67.0 - Closes rhbz2251762...

Fedora: Security Advisory (FEDORA-2023-2f0957b051)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-ff1e594f3d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GO-2022-0878 Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone in github.com/rclone/rclone

Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone in github.com/rclone/rclone...

Cloning Content to Linode Object Storage with RClone

...

OPENSUSE-SU-2024:14053-1 rclone-1.67.0-1.1 on GA media

These are all security issues fixed in the rclone-1.67.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11297-1 rclone-1.55.1-1.3 on GA media

These are all security issues fixed in the rclone-1.55.1-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13781-1 rclone-1.66.0-1.1 on GA media

These are all security issues fixed in the rclone-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13569-1 rclone-1.65.1-1.1 on GA media

These are all security issues fixed in the rclone-1.65.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: guac, step-ca, chezmoi, goreleaser, tempo, velero, harbor-registry, rook, tkn, opentelemetry-collector, trino, policy-controller, rclone, tekton-chains, bank-vaults, airflow, cosign, external-dns, grafana-mimir, prometheus-operator, sigstore-scaffolding, cortex,...

Fedora 40 : rclone (2023-ff1e594f3d)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ff1e594f3d advisory. Automatic update for rclone-1.64.0-1.fc40. Changelog Thu Oct 12 2023 Mikel Olasagasti Uranga - 1.64.0-1 - Update to 1.64.0 - Closes rhbz2238581...