Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

openSUSE 15.2: SUSE-SU-2021:0272-1 Moderate: rclone Security Issue

opensuse
Calendar Grey February 10, 2021
Dist Opensuse Esm H88
A recent security patch for openSUSE tackles a pertinent flaw in rclone, effectively mitigating vulnerability risks.
An update that fixes one vulnerability is now available

Description

This update for rclone fixes the following issues:

rclone was updated to version 1.53.3:

* Bug Fixes

- Fix incorrect use of math/rand instead of crypto/rand CVE-2020-28924

boo#1179005 (Nick Craig-Wood)

- Check https://github.com/rclone/passwordcheck for a tool check for

weak passwords generated by rclone

* VFS

- Fix vfs/refresh calls with fs= parameter (Nick Craig-Wood)

* Sharefile

- Fix backend due to API swapping integers for strings (Nick

Craig-Wood)

Update to 1.53.2:

* Bug Fixes

- accounting

+ Fix incorrect speed and transferTime in core/stats (Nick

Craig-Wood)

+ Stabilize display order of transfers on Windows (Nick Craig-Wood)

- operations

+ Fix use of --suffix without --backup-dir (Nick Craig-Wood)

+ Fix spurious "--checksum is in use but the source and destination

have no hashes in common" (Nick Craig-Wood)

- build

+...

Read the Full Advisory

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP2:

zypper in -t patch openSUSE-2021-272=1

Package List

- openSUSE Backports SLE-15-SP2 (ppc64le s390x x86_64):

rclone-1.53.3-bp152.2.4.11

- openSUSE Backports SLE-15-SP2 (noarch):

rclone-bash-completion-1.53.3-bp152.2.4.11

rclone-zsh-completion-1.53.3-bp152.2.4.11

References

https://www.suse.com/security/cve/CVE-2020-28924.html

https://bugzilla.suse.com/1179005

Announcement ID: openSUSE-SU-2021:0272-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP2 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here