rclone v1.74.3

v1.74.3

rclone v1.74.3

Fixed 12
  • Fix wrong source file:line in JSON logs from release builds
  • Fix empty directory listings on re-read in mount2
  • Fix serve s3 multipart ListParts pagination returning wrong part numbers
  • Fix file corruption in serve sftp when a client resumes an upload
  • Fix truncate request being silently ignored in serve sftp
  • Fix getXattr returning empty map instead of nil in Local
Removed 1
  • Remove duplicate upload_cutoff config option in Drime
Security 5
  • Fix unauthenticated command execution via --rc-serve inline remotes CVE-2026-49980
  • Stop global.* connection string options changing config CVE-2026-49980
  • Fix CVE-2026-42504 mime quadratic complexity in WordDecoder.DecodeHeader by upgrading to go1.26.4
  • Fix CVE-2026-42507 net/textproto arbitrary input included in errors without escaping by upgrading to go1.26.4
  • Fix CVE-2026-27145 crypto/x509 split candidate hostname only once by upgrading to go1.26.4

See commits

  • Bug Fixes
    • rc
      • Fix unauthenticated command execution via --rc-serve inline remotes CVE-2026-49980 (Nick Craig-Wood)
      • Stop global.* connection string options changing config CVE-2026-49980 (Nick Craig-Wood)
    • build: Fix multiple CVEs by upgrading to go1.26.4 (Nick Craig-Wood)
      • CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader
      • CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping
      • CVE-2026-27145: crypto/x509: split candidate hostname only once
    • log: Fix wrong source file:line in JSON logs from release builds (Nick Craig-Wood)
    • mount2: Fix empty directory listings on re-read (Janne Beate Bakeng)
    • serve s3: Fix multipart ListParts pagination returning wrong part numbers (Nick Craig-Wood)
    • serve sftp
      • Fix file corruption when a client resumes an upload (Nick Craig-Wood)
      • Fix truncate request being silently ignored (Nick Craig-Wood)
  • Local
    • Fix getXattr returning empty map instead of nil (Leon Brocard)
  • Drime
    • Fix server-side copy and move failing with Cloudflare 520 error (Nick Craig-Wood)
    • Fix files being uploaded to the wrong directory (Nick Craig-Wood)
    • Remove duplicate upload_cutoff config option (Nick Craig-Wood)
    • Fix directory rename leaving the renamed folder empty in VFS (Nick Craig-Wood)
  • Drive
    • Fix server-side move failing on shared drives with duplicate dirs (Nick Craig-Wood)
  • Iclouddrive
    • Fix ADP/PCS cookie acquisition for iCloud Drive (Yakov Till)
    • Fix "Index has invalid data" error listing iCloud Photos (Nick Craig-Wood)
View original

Upgraded? How did it go?

Discussion