932 matches found
Important: rclone
Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...
Important: rclone
Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...
GHSA-VRW8-FXC6-2R93 vulnerabilities
Vulnerabilities for packages: karma, cloudflared, sftpgo, caddy, gitness, step-issuer, kyverno-policy-reporter-ui, step-ca, buf, rclone, gogatekeeper, tkn, step...
OPENSUSE-SU-2025:15054-1 rclone-1.69.2-1.1 on GA media
These are all security issues fixed in the rclone-1.69.2-1.1 package on the GA media of openSUSE Tumbleweed...
BIT-RCLONE-2024-52522 Rclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata
Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...
CVE-2023-45286 vulnerabilities
Vulnerabilities for packages: rclone...
GHSA-XWH9-GC39-5298 vulnerabilities
Vulnerabilities for packages: rclone...
Rclone Installed (Windows)
Binary data rclonewininstalled.nbin...
[SECURITY] Fedora 41 Update: rclone-1.68.2-1.fc41
Rclone is a command line program to sync files and directories to and from various cloud services...
rclone-1.69.0-1.1 on GA media (moderate)
rclone-1.69.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14641-1 Rating: moderate Cross-References: CVE-2024-45337 CVE-2024-45338 CVSS scores: CVE-2024-45337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2024-45338 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H...
OPENSUSE-SU-2025:14641-1 rclone-1.69.0-1.1 on GA media
These are all security issues fixed in the rclone-1.69.0-1.1 package on the GA media of openSUSE Tumbleweed...
Rclone Installed (Linux)
Binary data rclonenixinstalled.nbin...
CVE-2024-45337 vulnerabilities
Vulnerabilities for packages: cilium, argo-workflows, terraform-docs, age, splunk-otel-collector, go-licenses, step, crossplane-provider-azure-storage, step-issuer-fips, cluster-autoscaler, kaniko, task, prometheus-node-exporter, neuvector-fips, tkn, kubernetes-dashboard-fips,...
rclone-1.68.2-2.1 on GA media (moderate)
rclone-1.68.2-2.1 on GA media Announcement ID: openSUSE-SU-2024:14524-1 Rating: moderate Cross-References: CVE-2024-52522 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the rclone-1.68.2-2.1...
OPENSUSE-SU-2024:14524-1 rclone-1.68.2-2.1 on GA media
These are all security issues fixed in the rclone-1.68.2-2.1 package on the GA media of openSUSE Tumbleweed...
Rclone Installed (Mac OS X)
Binary data rclonemacosinstalled.nbin...
RClone 1.59.x < 1.68.2 Privilege Escalation (macOS)
The version of rclone installed on the remote macOS / Mac OS X host is prior to 1.68.2. It is, therefore, affected by a privilege escalation vulnerability due to insecure handling of symlinks with --links and --metadata while copying to local disk. This vulnerability could allow unprivileged user...
Rclone has Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata
tl;dr: unprivileged user creates a symlink to /etc/sudoers, /etc/shadow or similar and waits for a privileged user or process to copy/backup/mirror users data using --links and --metadata. unprivileged user now owns /etc/sudoers. Summary Insecure handling of symlinks with --links and --metadata i...