UbuntuUpdates.org

Package "rclone"

Name: rclone

Description:

rsync for commercial cloud storage

Latest version: 1.60.1+dfsg-4ubuntu3.1
Release: resolute (26.04)
Level: updates
Repository: universe
Homepage: https://github.com/rclone/rclone

Links


Download "rclone"


Other versions of "rclone" in Resolute

Repository Area Version
base universe 1.60.1+dfsg-4ubuntu3
security universe 1.60.1+dfsg-4ubuntu3.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.60.1+dfsg-4ubuntu3.1 2026-05-25 11:07:27 UTC

  rclone (1.60.1+dfsg-4ubuntu3.1) resolute-security; urgency=medium

  * SECURITY UPDATE: authentication bypass in rcd leading to sensitive
    operations and/or remote command execution (LP: #2152913)
    - debian/patches/CVE-2026-41176.patch
    - debian/patches/CVE-2026-41176-2.patch
    - CVE-2026-41176
  * SECUIRTY UPDATE: unauthenticated remote command execution in rcd
    (LP: #2152914)
    - debian/patches/CVE-2026-41179.patch
    - CVE-2026-41179

 -- Wesley Hershberger <email address hidden> Mon, 18 May 2026 10:16:02 -0500

2152913 CVE-2026-41176
2152914 CVE-2026-41179
CVE-2026-41176 Rclone is a command-line program to sync files and directories to and from different cloud storage providers. The RC endpoint `options/set` is expose
CVE-2026-41179 Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Starting in version 1.48.0 and prior to



About   -   Send Feedback to @ubuntu_updates