Packages / Debian 13 (Trixie) / golang / golang-github-rclone-rclone-dev

Package: golang-github-rclone-rclone-dev (1.60.1+dfsg-4)

go source code of rclone

Other Packages Related to golang-github-rclone-rclone-dev:

Download golang-github-rclone-rclone-dev

ArchitecturePackage sizeInstalled sizeFilesPackage
all1.3 MiB9.5 MiBlist of filesDownload

Percorsi file del pacchetto (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 13 (Trixie) main amd64

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1.60.1+dfsg-4trixie / mainallDebian 13 · main · amd641.3 MiB9.5 MiBpool/main/r/rclone/golang-github-rclone-rclone-dev_1.60.1+dfsg-4_all.deb
1.60.1+dfsg-4trixie / mainallDebian 13 · main · arm641.3 MiB9.5 MiBpool/main/r/rclone/golang-github-rclone-rclone-dev_1.60.1+dfsg-4_all.deb

Field source: Debian 13 (Trixie) main amd64

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVEGravitàImpatto per versione
[CVE-2026-116196]

Published:

rclone: CVE-2026-116196

Medium(6)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    dsa · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    dsa · rclone · debian · 13

[CVE-2026-116194]

Published:

rclone: CVE-2026-116194

High(7.6)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    dsa · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    dsa · rclone · debian · 13

[CVE-2026-116192]

Published:

rclone: CVE-2026-116192

High(8.2)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    dsa · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    dsa · rclone · debian · 13

[CVE-2026-116191]

Published:

rclone: CVE-2026-116191

High(8.7)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    dsa · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    dsa · rclone · debian · 13

[CVE-2026-116190]

Published:

rclone: CVE-2026-116190

Medium(6.3)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    dsa · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    dsa · rclone · debian · 13

[CVE-2026-116189]

Published:

rclone: CVE-2026-116189

High(7.7)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    dsa · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    dsa · rclone · debian · 13

[CVE-2026-116188]

Published:

rclone: CVE-2026-116188

Medium(6.9)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    dsa · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    dsa · rclone · debian · 13

[CVE-2026-88046]

Published:

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone core does not reject parent-directory segments in source Object.Re

Medium(5.3)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

[CVE-2026-88045]

Published:

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.75.0 until 1.75.1, the serve S3 streamed multipart path in cmd/serve/s3/multipart.g

High(7.5)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

[CVE-2026-88044]

Published:

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.0 until 1.75.1, the serve/start RC interface accepts per-server proxyOpt.AuthPro

Critical(9.1)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

[CVE-2026-88018]

Published:

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve s3 configured with --auth-proxy but without --auth-key allow

Critical(9.8)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

[CVE-2026-88017]

Published:

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.0 until 1.75.1, the FTP auth-proxy driver in cmd/serve/ftp/ftp.go stores one obs

Critical(9)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

[CVE-2026-88016]

Published:

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, when backend/local runs with --links, a source .rclonelink object can pla

High(7.1)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

[CVE-2026-88015]

Published:

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, backend/local with --links or links=true exposes symlink targets as .rclo

Medium(5.3)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

[CVE-2026-88014]

Published:

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend method (*Fs).readZip in backend/archive/

Medium(6.3)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

[CVE-2026-88013]

Published:

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.0 until 1.75.1, the HTTP backend attaches headers configured through --http-head

Low(3.7)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

[CVE-2026-93986]

Published:

rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object names. Attackers can craft special names

Low(3.1)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

[CVE-2026-93987]

Published:

rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve docker` volume plugin. newVolume() in cmd/serve/docker/volume.go computes a volume's mountpoint as fil

High(7.9)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

[CVE-2026-71313]

Published:

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the conf

Medium(6.9)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

[CVE-2026-71312]

Published:

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in b

High(8)Sconosciuto

L’associazione dei pacchetti è in corso. Osservato:

Dettagli (2)
  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

  • 1.60.1+dfsg-4 · all · trixie

    Interessata

    nvd · rclone · debian · 13

[Altri risultati]

Ultima sincronizzazione:

[Catalogo CVE]

Checksum

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1.60.1+dfsg-4 / allOsservato Sep 1, 2026sha256 98f9130680d0…a03ade93Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 98f9130680d05ce6992092779e165310452a3bf15226543d49eae5e5a03ade93

Verifica download

printf '%s %s\n' '98f9130680d05ce6992092779e165310452a3bf15226543d49eae5e5a03ade93' 'golang-github-rclone-rclone-dev_1.60.1+dfsg-4_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

1.60.1+dfsg-4 / allOsservato Sep 1, 2026sha256 98f9130680d0…a03ade93Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 98f9130680d05ce6992092779e165310452a3bf15226543d49eae5e5a03ade93

Verifica download

printf '%s %s\n' '98f9130680d05ce6992092779e165310452a3bf15226543d49eae5e5a03ade93' 'golang-github-rclone-rclone-dev_1.60.1+dfsg-4_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

Fonti

  • Authoritative source; repository metadata signature verified

    Prova della firma

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Prova della firma

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified