openSUSE: 2020:2168-1 Moderate: rclone Denial of Service Fix
opensuse
December 5, 2020
An update that fixes one vulnerability is now available.
Description
This update for rclone fixes the following issues:
rclone was updated to version 1.53.3:
* Bug Fixes
- Fix incorrect use of math/rand instead of crypto/rand CVE-2020-28924
boo#1179005 (Nick Craig-Wood)
- Check https://github.com/rclone/passwordcheck for a tool check for
weak passwords generated by rclone
* VFS
- Fix vfs/refresh calls with fs= parameter (Nick Craig-Wood)
* Sharefile
- Fix backend due to API swapping integers for strings (Nick
Craig-Wood)
Update to 1.53.2:
* Bug Fixes
- accounting
+ Fix incorrect speed and transferTime in core/stats (Nick
Craig-Wood)
+ Stabilize display order of transfers on Windows (Nick Craig-Wood)
- operations
+ Fix use of --suffix without --backup-dir (Nick Craig-Wood)
+ Fix spurious "--checksum is in use but the source and destination
have no hashes in common" (Nick Craig-Wood)
- build
...
Read the Full Advisory
Patch
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP1:
zypper in -t patch openSUSE-2020-2168=1
Package List
- openSUSE Backports SLE-15-SP1 (ppc64le s390x x86_64):
rclone-1.53.3-bp151.4.6.1
- openSUSE Backports SLE-15-SP1 (noarch):
rclone-bash-completion-1.53.3-bp151.4.6.1
rclone-zsh-completion-1.53.3-bp151.4.6.1
References
https://www.suse.com/security/cve/CVE-2020-28924.html
https://bugzilla.suse.com/1179005
--===============7471761428001154629=
PREVIOUS
NEXT
Announcement ID: openSUSE-SU-2020:2168-1
Rating: moderate
Affected Products:
openSUSE Backports SLE-15-SP1
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!