OPENSUSE-SU-2024:14495-1 rclone-1.68.1-2.1 on GA media

These are all security issues fixed in the rclone-1.68.1-2.1 package on the GA media of openSUSE Tumbleweed...

Fedora 41 : rclone (2024-3ef0d3c37d)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-3ef0d3c37d advisory. Automatic update for rclone-1.67.0-1.fc41. Changelog Fri Aug 9 2024 Mikel Olasagasti Uranga - 1.67.0-1 - Update to 1.67.0 - Closes rhbz2251762...

Fedora: Security Advisory (FEDORA-2023-ff1e594f3d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-2f0957b051)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GO-2022-0878 Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone in github.com/rclone/rclone

Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone in github.com/rclone/rclone...

Cloning Content to Linode Object Storage with RClone

...

OPENSUSE-SU-2024:14053-1 rclone-1.67.0-1.1 on GA media

These are all security issues fixed in the rclone-1.67.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13781-1 rclone-1.66.0-1.1 on GA media

These are all security issues fixed in the rclone-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13569-1 rclone-1.65.1-1.1 on GA media

These are all security issues fixed in the rclone-1.65.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11297-1 rclone-1.55.1-1.3 on GA media

These are all security issues fixed in the rclone-1.55.1-1.3 package on the GA media of openSUSE Tumbleweed...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flyte, restic, chezmoi, sqlpad, sops, terragrunt, goreleaser, timestamp-authority, airflow, fulcio, policy-controller, opentelemetry-collector-contrib, wal-g, buildkitd, k8sgpt, druid, kubescape, prometheus-operator, secrets-store-csi-driver-provider-azure, tkn,...

Fedora 40 : rclone (2023-ff1e594f3d)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ff1e594f3d advisory. Automatic update for rclone-1.64.0-1.fc40. Changelog Thu Oct 12 2023 Mikel Olasagasti Uranga - 1.64.0-1 - Update to 1.64.0 - Closes rhbz2238581...

PT-2024-12934 · Undefined · Undefined

OSINT CTI Qlik Sense Users - Adversary Tactics: - Initial Access: CVE-2023-412662, CVE-2023-412653 - RMMs: ManageEngine UEMS, Zoho Assist, DWAgent - Lateral Mov: RDP & PuTTY Link8 - Exfil: WizTree & Rclone - Impact: Cactus Ransomware https://t.co/gt0dhuFniS...

PT-2024-12933 · Undefined · Undefined

OSINT CTI Qlik Sense Users - Adversary Tactics: - Initial Access: CVE-2023-412662, CVE-2023-412653 - RMMs: ManageEngine UEMS, Zoho Assist, DWAgent - Lateral Mov: RDP & PuTTY Link8 - Exfil: WizTree & Rclone - Impact: Cactus Ransomware https://t.co/gt0dhuFniS...

BIT-RCLONE-2020-28924

An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limi...

FreeBSD : rclone -- Multiple vulnerabilities (b5e22ec5-bc4b-11ee-b0b5-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b5e22ec5-bc4b-11ee-b0b5-b42e991fc52e advisory. - A race condition in go-resty can result in HTTP request body disclosure across requests. Thi...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: apko, gitness, crossplane-provider-aws-s3, aactl, flux-image-automation-controller, skaffold, terragrunt, spire-server-fips, tkn, crossplane-provider-aws-elasticache, crossplane-provider-aws-route53, syft, slsa-verifier, vexctl, terraform-provider-google,...

rclone -- Multiple vulnerabilities

Multiple vulnerabilities in ssh and golang CVE-2023-45286: HTTP request body disclosure in go-resty disclosure across requests. CVE-2023-48795: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity...

Fedora 39 : rclone (2023-2f0957b051)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-2f0957b051 advisory. Automatic update for rclone-1.63.1-1.fc39. Changelog Mon Jul 31 2023 Mikel Olasagasti Uranga - 1.63.1-1 - Update to 1.63.1 - Closes rhbz2155701...

Amazon Linux 2 : rclone (ALAS-2023-2143)

The version of rclone installed on the remote host is prior to 1.55.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2143 advisory. http2/hpack: avoid quadratic complexity in hpack decoding CVE-2022-41723 Tenable has extracted the preceding description block...