[ubuntu/questing-security] rclone 1.60.1+dfsg-4ubuntu2.1 (Accepted)
Eduardo Barretto
eduardo.barretto at canonical.com
Mon May 25 08:01:28 UTC 2026
rclone (1.60.1+dfsg-4ubuntu2.1) questing-security; urgency=medium
* SECURITY UPDATE: authentication bypass in rcd leading to sensitive
operations and/or remote command execution (LP: #2152913)
- debian/patches/CVE-2026-41176.patch
- debian/patches/CVE-2026-41176-2.patch
- CVE-2026-41176
* SECUIRTY UPDATE: unauthenticated remote command execution in rcd
(LP: #2152914)
- debian/patches/CVE-2026-41179.patch
- CVE-2026-41179
Date: 2026-05-21 09:50:10.980165+00:00
Changed-By: Wesley Hershberger <wesley.hershberger at canonical.com>
Signed-By: Eduardo Barretto <eduardo.barretto at canonical.com>
https://launchpad.net/ubuntu/+source/rclone/1.60.1+dfsg-4ubuntu2.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Questing-changes
mailing list