tocsin

Alpine/rclone: medium 5.3

The "go bug" command writes to two files with predictable names in the system temporary directory (for example, "/tmp"). An attacker with access to the temporary directory can create a symlink in one

Action: Upgrade rclone to 1.74.1-r0 or later.

Affected

introducedfixedlast affected
01.74.1-r0-

Fixed versions

1.74.1-r0

Sources

published · modified · JSON