460 matches found
rclone-1.72.0-1.1 on GA media (moderate)
rclone-1.72.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15761-1 Rating: moderate Cross-References: CVE-2025-58181 CVSS scores: CVE-2025-58181 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-58181 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N...
OPENSUSE-SU-2025:15761-1 rclone-1.72.0-1.1 on GA media
These are all security issues fixed in the rclone-1.72.0-1.1 package on the GA media of openSUSE Tumbleweed...
Amazon Linux 2 : rclone, --advisory ALAS2-2025-3071 (ALAS-2025-3071)
The version of rclone installed on the remote host is prior to 1.55.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3071 advisory. net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses...
EUVD-2018-4860
Malware in sbrugna...
EUVD-2021-1401
Malware in sbrugna...
EUVD-2024-3358
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-52522
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and...
Linux Distros Unpatched Vulnerability : CVE-2020-28924
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: hydra, kubecolor, flux, crossplane-provider-azure-authorization, flux-source-controller-fips, k3d, nri-postgresql, mattermost-fips, prometheus-postgres-exporter, victoriametrics-fips, hubble, spiffe-helper, mkcert, rekor, flux-image-reflector-controller, lazygit,...
Fedora 43 : rclone (2025-35515b7ddf)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-35515b7ddf advisory. Automatic update for rclone-1.70.2-1.fc43. Changelog Sun Jul 6 2025 Mikel Olasagasti Uranga - 1.70.2-1 - Update to 1.70.2 - Closes rhbz2254045...
Amazon Linux 2 : rclone (ALAS-2025-2905)
The version of rclone installed on the remote host is prior to 1.55.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2905 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF...
Important: rclone
Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...
Important: rclone
Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...
GHSA-VRW8-FXC6-2R93 vulnerabilities
Vulnerabilities for packages: gitness, sftpgo, step, tkn, rclone, gogatekeeper, step-issuer, step-ca, cloudflared, caddy, kyverno-policy-reporter-ui, karma, buf...
OPENSUSE-SU-2025:15054-1 rclone-1.69.2-1.1 on GA media
These are all security issues fixed in the rclone-1.69.2-1.1 package on the GA media of openSUSE Tumbleweed...
BIT-RCLONE-2024-52522 Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata
Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...
CVE-2023-45286 vulnerabilities
Vulnerabilities for packages: rclone...
GHSA-XWH9-GC39-5298 vulnerabilities
Vulnerabilities for packages: rclone...
