506 matches found
OPENSUSE-SU-2025:15054-1 rclone-1.69.2-1.1 on GA media
These are all security issues fixed in the rclone-1.69.2-1.1 package on the GA media of openSUSE Tumbleweed...
BIT-RCLONE-2024-52522 Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata
Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...
CVE-2023-45286 vulnerabilities
Vulnerabilities for packages: rclone...
GHSA-XWH9-GC39-5298 vulnerabilities
Vulnerabilities for packages: rclone...
Rclone Installed (Windows)
Binary data rclonewininstalled.nbin...
[SECURITY] Fedora 41 Update: rclone-1.68.2-1.fc41
Rclone is a command line program to sync files and directories to and from various cloud services...
rclone-1.69.0-1.1 on GA media (moderate)
rclone-1.69.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14641-1 Rating: moderate Cross-References: CVE-2024-45337 CVE-2024-45338 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2024-45338 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H...
OPENSUSE-SU-2025:14641-1 rclone-1.69.0-1.1 on GA media
These are all security issues fixed in the rclone-1.69.0-1.1 package on the GA media of openSUSE Tumbleweed...
Rclone Installed (Linux)
Binary data rclonenixinstalled.nbin...
CVE-2024-45337 vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard-fips, amazon-cloudwatch-agent-operator-fips, crossplane-provider-aws-route53, promxy-fips, azure-aad-pod-identity-mic, actions-runner-controller-fips, kubeflow-pipelines, temporal-ui-server-fips, local-path-provisioner-fips, octo-sts,...
rclone-1.68.2-2.1 on GA media (moderate)
rclone-1.68.2-2.1 on GA media Announcement ID: openSUSE-SU-2024:14524-1 Rating: moderate Cross-References: CVE-2024-52522 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the rclone-1.68.2-2.1...
OPENSUSE-SU-2024:14524-1 rclone-1.68.2-2.1 on GA media
These are all security issues fixed in the rclone-1.68.2-2.1 package on the GA media of openSUSE Tumbleweed...
Rclone Installed (Mac OS X)
Binary data rclonemacosinstalled.nbin...
RClone 1.59.x < 1.68.2 Privilege Escalation (macOS)
The version of rclone installed on the remote macOS / Mac OS X host is prior to 1.68.2. It is, therefore, affected by a privilege escalation vulnerability due to insecure handling of symlinks with --links and --metadata while copying to local disk. This vulnerability could allow unprivileged user...
Rclone has Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata
tl;dr: unprivileged user creates a symlink to /etc/sudoers, /etc/shadow or similar and waits for a privileged user or process to copy/backup/mirror users data using --links and --metadata. unprivileged user now owns /etc/sudoers. Summary Insecure handling of symlinks with --links and --metadata i...
GHSA-HRXH-9W67-G4CV vulnerabilities
Vulnerabilities for packages: rclone...
GHSA-HRXH-9W67-G4CV vulnerabilities
Vulnerabilities for packages: rclone...
GHSA-HRXH-9W67-G4CV Rclone has Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata
tl;dr: unprivileged user creates a symlink to /etc/sudoers, /etc/shadow or similar and waits for a privileged user or process to copy/backup/mirror users data using --links and --metadata. unprivileged user now owns /etc/sudoers. Summary Insecure handling of symlinks with --links and --metadata i...
GO-2024-3271 Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone
Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata in github.com/rclone/rclone...
SUSE CVE-2024-52522
Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...