PT-2024-35354 · Rclone +2 · Rclone +2

Name of the Vulnerable Software and Affected Versions: rclone versions prior to 1.68.2 Description: The issue is related to insecure handling of symlinks with --links and --metadata in rclone while copying to local disk. This allows unprivileged users to indirectly modify ownership and permission...

rclone-1.68.1-2.1 on GA media (moderate)

rclone-1.68.1-2.1 on GA media Announcement ID: openSUSE-SU-2024:14495-1 Rating: moderate Cross-References: CVE-2024-51744 CVSS scores: CVE-2024-51744 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2024-51744 SUSE : 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N...

Rclone 安全漏洞

Rclone is a software from the Rclone team that synchronizes data asynchronously from cloud storage. The software supports Google Drive, Amazon Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Cloudfiles, Google Cloud Storage, Yandex Files and other cloud storage. A security vulnerabilit...

OPENSUSE-SU-2024:14495-1 rclone-1.68.1-2.1 on GA media

These are all security issues fixed in the rclone-1.68.1-2.1 package on the GA media of openSUSE Tumbleweed...

Fedora 41 : rclone (2024-3ef0d3c37d)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-3ef0d3c37d advisory. Automatic update for rclone-1.67.0-1.fc41. Changelog Fri Aug 9 2024 Mikel Olasagasti Uranga - 1.67.0-1 - Update to 1.67.0 - Closes rhbz2251762...

Fedora: Security Advisory (FEDORA-2023-ff1e594f3d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-2f0957b051)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GO-2022-0878 Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone in github.com/rclone/rclone

Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone in github.com/rclone/rclone...

Cloning Content to Linode Object Storage with RClone

...

OPENSUSE-SU-2024:14053-1 rclone-1.67.0-1.1 on GA media

These are all security issues fixed in the rclone-1.67.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13781-1 rclone-1.66.0-1.1 on GA media

These are all security issues fixed in the rclone-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13569-1 rclone-1.65.1-1.1 on GA media

These are all security issues fixed in the rclone-1.65.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11297-1 rclone-1.55.1-1.3 on GA media

These are all security issues fixed in the rclone-1.55.1-1.3 package on the GA media of openSUSE Tumbleweed...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: kubescape, flux-kustomize-controller, rook, flux, sops, trivy, tkn, zarf, k8sgpt, restic, tempo, buildkitd, py3-azure-identity, terragrunt, external-dns, harbor-registry, step, boring-registry, druid, grafana-mimir, prometheus-operator, sigstore-scaffolding, sqlpad,...

Fedora 40 : rclone (2023-ff1e594f3d)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ff1e594f3d advisory. Automatic update for rclone-1.64.0-1.fc40. Changelog Thu Oct 12 2023 Mikel Olasagasti Uranga - 1.64.0-1 - Update to 1.64.0 - Closes rhbz2238581...

PT-2024-12934 · Undefined · Undefined

OSINT CTI Qlik Sense Users - Adversary Tactics: - Initial Access: CVE-2023-412662, CVE-2023-412653 - RMMs: ManageEngine UEMS, Zoho Assist, DWAgent - Lateral Mov: RDP & PuTTY Link8 - Exfil: WizTree & Rclone - Impact: Cactus Ransomware https://t.co/gt0dhuFniS...

PT-2024-12933 · Undefined · Undefined

OSINT CTI Qlik Sense Users - Adversary Tactics: - Initial Access: CVE-2023-412662, CVE-2023-412653 - RMMs: ManageEngine UEMS, Zoho Assist, DWAgent - Lateral Mov: RDP & PuTTY Link8 - Exfil: WizTree & Rclone - Impact: Cactus Ransomware https://t.co/gt0dhuFniS...

BIT-RCLONE-2020-28924

An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limi...

FreeBSD : rclone -- Multiple vulnerabilities (b5e22ec5-bc4b-11ee-b0b5-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b5e22ec5-bc4b-11ee-b0b5-b42e991fc52e advisory. - A race condition in go-resty can result in HTTP request body disclosure across requests. Thi...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lambda, crossplane-provider-aws-rds, crossplane-provider-aws-route53, gitness, spire-server, kaniko, scorecard, tekton-chains, apko, crossplane-provider-aws-memorydb, crossplane-provider-aws-kms, sops, crossplane-provider-aws-dynamodb,...