ALT-PU-2026-16426: package rclone update to version 1.75.1-alt1
Описание
This update upgrades rclone to version 1.75.1-alt1.
Устраненные уязвимости12
Ссылки11
GHSA-486v-q2wf-fp2r
https://github.com/advisories/GHSA-486v-q2wf-fp2rGHSA-4vr5-p2gc-h23p
https://github.com/advisories/GHSA-4vr5-p2gc-h23pGHSA-66hp-wgxq-6f5q
https://github.com/advisories/GHSA-66hp-wgxq-6f5qGHSA-c476-6w5q-jw77
https://github.com/advisories/GHSA-c476-6w5q-jw77GHSA-cf44-9pgv-m4xc
https://github.com/advisories/GHSA-cf44-9pgv-m4xcGHSA-f8g7-2xjc-7mfh
https://github.com/advisories/GHSA-f8g7-2xjc-7mfhGHSA-fqj9-69pf-6pjg
https://github.com/advisories/GHSA-fqj9-69pf-6pjgGHSA-p6m2-r3w9-mpxw
https://github.com/advisories/GHSA-p6m2-r3w9-mpxwGHSA-qw24-gh76-8rvv
https://github.com/advisories/GHSA-qw24-gh76-8rvvGHSA-xwwr-4h3p-r22c
https://github.com/advisories/GHSA-xwwr-4h3p-r22cСвязанные уязвимости
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash root on an existing named remote via --rc-serve. Attackers can make HEAD/GET requests to attacker-chosen hosts to read responses, capture configured custom headers, or obtain valid NetStorage request signatures.
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash root on an existing named remote via --rc-serve. Attackers can make HEAD/GET requests to attacker-chosen hosts to read responses, capture configured custom headers, or obtain valid NetStorage request signatures.
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash root on an existing named remote via --rc-serve. Attackers can make HEAD/GET requests to attacker-chosen hosts to read responses, capture configured custom headers, or obtain valid NetStorage request signatures.
rclone from 1.37 before 1.74.2 contains a server-side request forgery ...
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash root on an existing named remote via --rc-serve. Attackers can make HEAD/GET requests to attacker-chosen hosts to read responses, capture configured custom headers, or obtain valid NetStorage request signatures.