EUVD-2024-3358

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-52522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and...

Linux Distros Unpatched Vulnerability : CVE-2020-28924

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: eks-distro, spegel, yace, blob-csi-fips, k8s-device-plugin, chainctl, flux-source-controller-fips, nri-rabbitmq, openbao-fips, trivy, packer-fips, esbuild, temporal-ui-server-fips, vt-cli, podinfo, aws-sigv4-proxy, newrelic-fluent-bit-output,...

Fedora 43 : rclone (2025-35515b7ddf)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-35515b7ddf advisory. Automatic update for rclone-1.70.2-1.fc43. Changelog Sun Jul 6 2025 Mikel Olasagasti Uranga - 1.70.2-1 - Update to 1.70.2 - Closes rhbz2254045...

Amazon Linux 2 : rclone (ALAS-2025-2905)

The version of rclone installed on the remote host is prior to 1.55.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2905 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF...

Important: rclone

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Important: rclone

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

GHSA-VRW8-FXC6-2R93 vulnerabilities

Vulnerabilities for packages: caddy, karma, gogatekeeper, cloudflared, step-issuer, buf, rclone, kyverno-policy-reporter-ui, sftpgo, gitness, step-ca, tkn, step...

OPENSUSE-SU-2025:15054-1 rclone-1.69.2-1.1 on GA media

These are all security issues fixed in the rclone-1.69.2-1.1 package on the GA media of openSUSE Tumbleweed...

BIT-RCLONE-2024-52522 Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...

CVE-2023-45286 vulnerabilities

Vulnerabilities for packages: rclone...

GHSA-XWH9-GC39-5298 vulnerabilities

Vulnerabilities for packages: rclone...

Rclone Installed (Windows)

Binary data rclonewininstalled.nbin...

[SECURITY] Fedora 41 Update: rclone-1.68.2-1.fc41

Rclone is a command line program to sync files and directories to and from various cloud services...

rclone-1.69.0-1.1 on GA media (moderate)

rclone-1.69.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14641-1 Rating: moderate Cross-References: CVE-2024-45337 CVE-2024-45338 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2024-45338 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H...

OPENSUSE-SU-2025:14641-1 rclone-1.69.0-1.1 on GA media

These are all security issues fixed in the rclone-1.69.0-1.1 package on the GA media of openSUSE Tumbleweed...

Rclone Installed (Linux)

Binary data rclonenixinstalled.nbin...

CVE-2024-45337 vulnerabilities

Vulnerabilities for packages: eks-distro, spegel, chainctl, flux-source-controller-fips, velero-plugin-for-microsoft-azure-fips, openbao-fips, trivy, grafana-alloy, vendir, packer-fips, metrics-server-fips, temporal-ui-server-fips, crossplane-provider-aws-iam, ferretdb, crossplane, rancher-webhoo...

rclone-1.68.2-2.1 on GA media (moderate)

rclone-1.68.2-2.1 on GA media Announcement ID: openSUSE-SU-2024:14524-1 Rating: moderate Cross-References: CVE-2024-52522 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the rclone-1.68.2-2.1...