{"affected":[{"ecosystem_specific":{"binaries":[{"rclone":"1.53.3-lp152.2.3.1","rclone-bash-completion":"1.53.3-lp152.2.3.1","rclone-zsh-completion":"1.53.3-lp152.2.3.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.2","name":"rclone","purl":"pkg:rpm/opensuse/rclone&distro=openSUSE%20Leap%2015.2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.53.3-lp152.2.3.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for rclone fixes the following issues:\n\nrclone was updated to version 1.53.3:\n\n  * Bug Fixes\n    - Fix incorrect use of math/rand instead of crypto/rand\n      CVE-2020-28924 boo#1179005 (Nick Craig-Wood)\n    - Check https://github.com/rclone/passwordcheck for a tool check for\n      weak passwords generated by rclone\n  * VFS\n    - Fix vfs/refresh calls with fs= parameter (Nick Craig-Wood)\n  * Sharefile\n    - Fix backend due to API swapping integers for strings (Nick Craig-Wood)\n\nUpdate to 1.53.2:\n\n  * Bug Fixes\n    - accounting\n      + Fix incorrect speed and transferTime in core/stats (Nick Craig-Wood)\n      + Stabilize display order of transfers on Windows (Nick Craig-Wood)\n    - operations\n      + Fix use of --suffix without --backup-dir (Nick Craig-Wood)\n      + Fix spurious '--checksum is in use but the source and destination have no hashes in common' (Nick Craig-Wood)\n    - build\n      + Work around GitHub actions brew problem (Nick Craig-Wood)\n      + Stop using set-env and set-path in the GitHub actions (Nick Craig-Wood)\n  * Mount\n    - mount2: Fix the swapped UID / GID values (Russell Cattelan)\n  * VFS\n    - Detect and recover from a file being removed externally from the cache (Nick Craig-Wood)\n    - Fix a deadlock vulnerability in downloaders.Close (Leo Luan)\n    - Fix a race condition in retryFailedResets (Leo Luan)\n    - Fix missed concurrency control between some item operations and reset (Leo Luan)\n    - Add exponential backoff during ENOSPC retries (Leo Luan)\n    - Add a missed update of used cache space (Leo Luan)\n    - Fix --no-modtime to not attempt to set modtimes (as documented) (Nick Craig-Wood)\n  * Local\n    - Fix sizes and syncing with --links option on Windows (Nick Craig-Wood)\n  * Chunker\n    - Disable ListR to fix missing files on GDrive (workaround) (Ivan Andreev)\n    - Fix upload over crypt (Ivan Andreev)\n  * Fichier\n    - Increase maximum file size from 100GB to 300GB (gyutw)\n  * Jottacloud\n    - Remove clientSecret from config when upgrading to token based authentication (buengese)\n    - Avoid double url escaping of device/mountpoint (albertony)\n    - Remove DirMove workaround as it's not required anymore - also (buengese)\n  * Mailru\n    - Fix uploads after recent changes on server (Ivan Andreev)\n    - Fix range requests after june changes on server (Ivan Andreev)\n    - Fix invalid timestamp on corrupted files (fixes) (Ivan Andreev)\n  * Onedrive\n    - Fix disk usage for sharepoint (Nick Craig-Wood)\n  * S3\n    - Add missing regions for AWS (Anagh Kumar Baranwal)\n  * Seafile\n    - Fix accessing libraries > 2GB on 32 bit systems (Muffin King)\n  * SFTP\n    - Always convert the checksum to lower case (buengese)\n  * Union\n    - Create root directories if none exist (Nick Craig-Wood)\n\nUpdate to version 1.53.1:\n\n  * Bug Fixes\n    - accounting: Remove new line from end of --stats-one-line display\n  * VFS\n    - Fix spurious error 'vfs cache: failed to _ensure cache EOF'\n    - Log an ERROR if we fail to set the file to be sparse\n  * Local\n    - Log an ERROR if we fail to set the file to be sparse\n  * Drive\n    - Re-adds special oauth help text\n  * Opendrive\n    - Do not retry 400 errors\n\nUpdate to version 1.53.0\n\n  * New Features\n    - The VFS layer was heavily reworked for this release - see below for more details\n    - Interactive mode -i/--interactive for destructive operations (fishbullet)\n    - Add --bwlimit-file flag to limit speeds of individual file transfers (Nick Craig-Wood)\n    - Transfers are sorted by start time in the stats and progress output (Max Sum)\n    - Make sure backends expand ~ and environment vars in file names they use (Nick Craig-Wood)\n    - Add --refresh-times flag to set modtimes on hashless backends (Nick Craig-Wood)\n    - rclone check\n      + Add reporting of filenames for same/missing/changed (Nick Craig-Wood)\n      + Make check command obey --dry-run/-i/--interactive (Nick Craig-Wood)\n      + Make check do --checkers files concurrently (Nick Craig-Wood)\n      + Retry downloads if they fail when using the --download flag (Nick Craig-Wood)\n      + Make it show stats by default (Nick Craig-Wood)\n    - rclone config\n      + Set RCLONE_CONFIG_DIR for use in config files and subprocesses (Nick Craig-Wood)\n      + Reject remote names starting with a dash. (jtagcat)\n    - rclone cryptcheck: Add reporting of filenames for same/missing/changed (Nick Craig-Wood)\n    - rclone dedupe: Make it obey the --size-only flag for duplicate detection (Nick Craig-Wood)\n    - rclone link: Add --expire and --unlink flags (Roman Kredentser)\n    - rclone mkdir: Warn when using mkdir on remotes which can't have empty directories (Nick Craig-Wood)\n    - rclone rc: Allow JSON parameters to simplify command line usage (Nick Craig-Wood)\n    - rclone serve ftp\n      + Don't compile on < go1.13 after dependency update (Nick Craig-Wood)\n      + Add error message if auth proxy fails (Nick Craig-Wood)\n      + Use refactored goftp.io/server library for binary shrink (Nick Craig-Wood)\n    - rclone serve restic: Expose interfaces so that rclone can be used as a library from within restic (Jack)\n    - rclone sync: Add --track-renames-strategy leaf (Nick Craig-Wood)\n    - rclone touch: Add ability to set nanosecond resolution times (Nick Craig-Wood)\n    - rclone tree: Remove -i shorthand for --noindent as it conflicts with -i/--interactive (Nick Craig-Wood)\n  * Bug Fixes\n  * Mount\n    - rc interface\n      + Add call for unmount all (Chaitanya Bankanhal)\n      + Make mount/mount remote control take vfsOpt option (Nick Craig-Wood)\n      + Add mountOpt to mount/mount (Nick Craig-Wood)\n      + Add VFS and Mount options to mount/listmounts (Nick Craig-Wood)\n    - Catch panics in cgofuse initialization and turn into error messages (Nick Craig-Wood)\n    - Always supply stat information in Readdir (Nick Craig-Wood)\n    - Add support for reading unknown length files using direct IO (Windows) (Nick Craig-Wood)\n    - Fix On Windows don't add -o uid/gid=-1 if user supplies -o uid/gid. (Nick Craig-Wood)\n    - Fix volume name broken in recent refactor (Nick Craig-Wood)\n  * VFS\n    - Implement partial reads for --vfs-cache-mode full (Nick Craig-Wood)\n    - Add --vfs-writeback option to delay writes back to cloud storage (Nick Craig-Wood)\n    - Add --vfs-read-ahead parameter for use with --vfs-cache-mode full (Nick Craig-Wood)\n    - Restart pending uploads on restart of the cache (Nick Craig-Wood)\n    - Support synchronous cache space recovery upon ENOSPC (Leo Luan)\n    - Allow ReadAt and WriteAt to run concurrently with themselves (Nick Craig-Wood)\n    - Change modtime of file before upload to current (Rob Calistri)\n    - Recommend --vfs-cache-modes writes on backends which can't stream (Nick Craig-Wood)\n    - Add an optional fs parameter to vfs rc methods (Nick Craig-Wood)\n    - Fix errors when using > 260 char files in the cache in Windows (Nick Craig-Wood)\n    - Fix renaming of items while they are being uploaded (Nick Craig-Wood)\n    - Fix very high load caused by slow directory listings (Nick Craig-Wood)\n    - Fix renamed files not being uploaded with --vfs-cache-mode minimal (Nick Craig-Wood)\n    - Fix directory locking caused by slow directory listings (Nick Craig-Wood)\n    - Fix saving from chrome without --vfs-cache-mode writes (Nick Craig-Wood)\n  * Crypt\n    Add --crypt-server-side-across-configs flag (Nick Craig-Wood)\n    Make any created backends be cached to fix rc problems (Nick Craig-Wood)\n  * Azure Blob\n    Don't compile on < go1.13 after dependency update (Nick Craig-Wood)\n  * B2\n    Implement server side copy for files > 5GB (Nick Craig-Wood)\n    Cancel in progress multipart uploads and copies on rclone exit (Nick Craig-Wood)\n    Note that b2's encoding now allows \\ but rclone's hasn't changed (Nick Craig-Wood)\n    Fix transfers when using download_url (Nick Craig-Wood)\n  * Box\n    - Implement rclone cleanup (buengese)\n    - Cancel in progress multipart uploads and copies on rclone exit (Nick Craig-Wood)\n    - Allow authentication with access token (David)\n  * Chunker\n    - Make any created backends be cached to fix rc problems (Nick Craig-Wood)\n  * Drive\n    - Add rclone backend drives to list shared drives (teamdrives) (Nick Craig-Wood)\n    - Implement rclone backend untrash (Nick Craig-Wood)\n    - Work around drive bug which didn't set modtime of copied docs (Nick Craig-Wood)\n    - Added --drive-starred-only to only show starred files (Jay McEntire)\n    - Deprecate --drive-alternate-export as it is no longer needed (themylogin)\n    - Fix duplication of Google docs on server side copy (Nick Craig-Wood)\n    - Fix 'panic: send on closed channel' when recycling dir entries (Nick Craig-Wood)\n  * Dropbox\n    - Add copyright detector info in limitations section in the docs (Alex Guerrero)\n    - Fix rclone link by removing expires parameter (Nick Craig-Wood)\n  * Fichier\n    - Detect Flood detected: IP Locked error and sleep for 30s (Nick Craig-Wood)\n  * FTP\n    - Add explicit TLS support (Heiko Bornholdt)\n    - Add support for --dump bodies and --dump auth for debugging (Nick Craig-Wood)\n    - Fix interoperation with pure-ftpd (Nick Craig-Wood)\n  * Google Cloud Storage\n    - Add support for anonymous access (Kai Lüke)\n  * Jottacloud\n    - Bring back legacy authentification for use with whitelabel versions (buengese)\n    - Switch to new api root - also implement a very ugly workaround for the DirMove failures (buengese)\n  * Onedrive\n    - Rework cancel of multipart uploads on rclone exit (Nick Craig-Wood)\n    - Implement rclone cleanup (Nick Craig-Wood)\n    - Add --onedrive-no-versions flag to remove old versions (Nick Craig-Wood)\n  * Pcloud\n    - Implement rclone link for public link creation (buengese)\n  * Qingstor\n    - Cancel in progress multipart uploads on rclone exit (Nick Craig-Wood)\n  * S3\n    - Preserve metadata when doing multipart copy (Nick Craig-Wood)\n    - Cancel in progress multipart uploads and copies on rclone exit (Nick Craig-Wood)\n    - Add rclone link for public link sharing (Roman Kredentser)\n    - Add rclone backend restore command to restore objects from GLACIER (Nick Craig-Wood)\n    - Add rclone cleanup and rclone backend cleanup to clean unfinished multipart uploads (Nick Craig-Wood)\n    - Add rclone backend list-multipart-uploads to list unfinished multipart uploads (Nick Craig-Wood)\n    - Add --s3-max-upload-parts support (Kamil Trzciński)\n    - Add --s3-no-check-bucket for minimising rclone transactions and perms (Nick Craig-Wood)\n    - Add --s3-profile and --s3-shared-credentials-file options (Nick Craig-Wood)\n    - Use regional s3 us-east-1 endpoint (David)\n    - Add Scaleway provider (Vincent Feltz)\n    - Update IBM COS endpoints (Egor Margineanu)\n    - Reduce the default --s3-copy-cutoff to < 5GB for Backblaze S3 compatibility (Nick Craig-Wood)\n    - Fix detection of bucket existing (Nick Craig-Wood)\n  * SFTP\n    - Use the absolute path instead of the relative path for listing for improved compatibility (Nick Craig-Wood)\n    - Add --sftp-subsystem and --sftp-server-command options (aus)\n * Swift\n    - Fix dangling large objects breaking the listing (Nick Craig-Wood)\n    - Fix purge not deleting directory markers (Nick Craig-Wood)\n    - Fix update multipart object removing all of its own parts (Nick Craig-Wood)\n    - Fix missing hash from object returned from upload (Nick Craig-Wood)\n  * Tardigrade\n    - Upgrade to uplink v1.2.0 (Kaloyan Raev)\n  * Union\n    - Fix writing with the all policy (Nick Craig-Wood)\n  * WebDAV\n    - Fix directory creation with 4shared (Nick Craig-Wood)\n\n- Update to version 1.52.3\n  * Bug Fixes\n    - docs\n      + Disable smart typography (eg en-dash) in MANUAL.* and man page (Nick Craig-Wood)\n      + Update install.md to reflect minimum Go version (Evan Harris)\n      + Update install from source instructions (Nick Craig-Wood)\n      + make_manual: Support SOURCE_DATE_EPOCH (Morten Linderud)\n    - log: Fix --use-json-log going to stderr not --log-file on Windows (Nick Craig-Wood)\n    - serve dlna: Fix file list on Samsung Series 6+ TVs (Matteo Pietro Dazzi)\n    - sync: Fix deadlock with --track-renames-strategy modtime (Nick Craig-Wood)\n  * Cache\n    - Fix moveto/copyto remote:file remote:file2 (Nick Craig-Wood)\n  * Drive\n    - Stop using root_folder_id as a cache (Nick Craig-Wood)\n    - Make dangling shortcuts appear in listings (Nick Craig-Wood)\n    - Drop 'Disabling ListR' messages down to debug (Nick Craig-Wood)\n    - Workaround and policy for Google Drive API (Dmitry Ustalov)\n  * FTP\n    - Add note to docs about home vs root directory selection (Nick Craig-Wood)\n  * Onedrive\n    - Fix reverting to Copy when Move would have worked (Nick Craig-Wood)\n    - Avoid comma rendered in URL in onedrive.md (Kevin)\n  * Pcloud\n    - Fix oauth on European region 'eapi.pcloud.com' (Nick Craig-Wood)\n  * S3\n    - Fix bucket Region auto detection when Region unset in config (Nick Craig-Wood)\n\n- Update to version 1.52.2\n  * Bug Fixes\n    - build\n      + Fix docker release build action (Nick Craig-Wood)\n      + Fix custom timezone in Docker image (NoLooseEnds)\n    - check: Fix misleading message which printed errors instead of differences (Nick Craig-Wood)\n    - errors: Add WSAECONNREFUSED and more to the list of retriable Windows errors (Nick Craig-Wood)\n    - rcd: Fix incorrect prometheus metrics (Gary Kim)\n    - serve restic: Fix flags so they use environment variables (Nick Craig-Wood)\n    - serve webdav: Fix flags so they use environment variables (Nick Craig-Wood)\n    - sync: Fix --track-renames-strategy modtime (Nick Craig-Wood)\n  * Drive\n    - Fix not being able to delete a directory with a trashed shortcut (Nick Craig-Wood)\n    - Fix creating a directory inside a shortcut (Nick Craig-Wood)\n    - Fix --drive-impersonate with cached root_folder_id (Nick Craig-Wood)\n  * SFTP\n    - Fix SSH key PEM loading (Zac Rubin)\n  * Swift\n    - Speed up deletes by not retrying segment container deletes (Nick Craig-Wood)\n  * Tardigrade\n    - Upgrade to uplink v1.1.1 (Caleb Case)\n  * WebDAV\n    - Fix free/used display for rclone about/df for certain backends (Nick Craig-Wood)\n\n- Update to version 1.52.1\n  * VFS\n    - Fix OS vs Unix path confusion - fixes ChangeNotify on Windows (Nick Craig-Wood)\n  * Drive\n    - Fix missing items when listing using --fast-list / ListR (Nick Craig-Wood)\n  * Putio\n    - Fix panic on Object.Open (Cenk Alti)\n  * S3\n    - Fix upload of single files into buckets without create permission (Nick Craig-Wood)\n    - Fix --header-upload (Nick Craig-Wood)\n  * Tardigrade\n    - Fix listing bug by upgrading to v1.0.7\n    - Set UserAgent to rclone (Caleb Case)\n\n- Update to version 1.52.0\n  * New backends\n    - Tardigrade backend for use with storj.io (Caleb Case)\n    - Union re-write to have multiple writable remotes (Max Sum)\n    - Seafile for Seafile server (Fred @creativeprojects)\n  * New commands\n    - backend: command for backend specific commands (see backends) (Nick Craig-Wood)\n    - cachestats: Deprecate in favour of rclone backend stats cache: (Nick Craig-Wood)\n    - dbhashsum: Deprecate in favour of rclone hashsum DropboxHash (Nick Craig-Wood)\n  * New Features\n    - Add --header-download and --header-upload flags for setting HTTP headers when uploading/downloading (Tim Gallant)\n    - Add --header flag to add HTTP headers to every HTTP transaction (Nick Craig-Wood)\n    - Add --check-first to do all checking before starting transfers (Nick Craig-Wood)\n    - Add --track-renames-strategy for configurable matching criteria for --track-renames (Bernd Schoolmann)\n    - Add --cutoff-mode hard,soft,catious (Shing Kit Chan & Franklyn Tackitt)\n    - Filter flags (eg --files-from -) can read from stdin (fishbullet)\n    - Add --error-on-no-transfer option (Jon Fautley)\n    - Implement --order-by xxx,mixed for copying some small and some big files (Nick Craig-Wood)\n    - Allow --max-backlog to be negative meaning as large as possible (Nick Craig-Wood)\n    - Added --no-unicode-normalization flag to allow Unicode filenames to remain unique (Ben Zenker)\n    - Allow --min-age/--max-age to take a date as well as a duration (Nick Craig-Wood)\n    - Add rename statistics for file and directory renames (Nick Craig-Wood)\n    - Add statistics output to JSON log (reddi)\n    - Make stats be printed on non-zero exit code (Nick Craig-Wood)\n    - When running --password-command allow use of stdin (Sébastien Gross)\n    - Stop empty strings being a valid remote path (Nick Craig-Wood)\n    - accounting: support WriterTo for less memory copying (Nick Craig-Wood)\n    - build\n        + Update to use go1.14 for the build (Nick Craig-Wood)\n        + Add -trimpath to release build for reproduceable builds (Nick Craig-Wood)\n        + Remove GOOS and GOARCH from Dockerfile (Brandon Philips)\n    - config\n        + Fsync the config file after writing to save more reliably (Nick Craig-Wood)\n        + Add --obscure and --no-obscure flags to config create/update (Nick Craig-Wood)\n        + Make config show take remote: as well as remote (Nick Craig-Wood)\n    - copyurl: Add --no-clobber flag (Denis)\n    - delete: Added --rmdirs flag to delete directories as well (Kush)\n    - filter: Added --files-from-raw flag (Ankur Gupta)\n    - genautocomplete: Add support for fish shell (Matan Rosenberg)\n    - log: Add support for syslog LOCAL facilities (Patryk Jakuszew)\n    - lsjson: Add --hash-type parameter and use it in lsf to speed up hashing (Nick Craig-Wood)\n    - rc\n        + Add -o/--opt and -a/--arg for more structured input (Nick Craig-Wood)\n        + Implement backend/command for running backend specific commands remotely (Nick Craig-Wood)\n        + Add mount/mount command for starting rclone mount via the API (Chaitanya)\n    - rcd: Add Prometheus metrics support (Gary Kim)\n    - serve http\n        + Added a --template flag for user defined markup (calistri)\n        + Add Last-Modified headers to files and directories (Nick Craig-Wood)\n    - serve sftp: Add support for multiple host keys by repeating --key flag (Maxime Suret)\n    - touch: Add --localtime flag to make --timestamp localtime not UTC (Nick Craig-Wood)\n  * Bug Fixes\n    - accounting\n      + Restore 'Max number of stats groups reached' log line (Michał Matczuk)\n      + Correct exitcode on Transfer Limit Exceeded flag. (Anuar Serdaliyev)\n      + Reset bytes read during copy retry (Ankur Gupta)\n      + Fix race clearing stats (Nick Craig-Wood)\n    - copy: Only create empty directories when they don't exist on the remote (Ishuah Kariuki)\n    - dedupe: Stop dedupe deleting files with identical IDs (Nick Craig-Wood)\n    - oauth\n      + Use custom http client so that --no-check-certificate is honored by oauth token fetch (Mark Spieth)\n      + Replace deprecated oauth2.NoContext (Lars Lehtonen)\n    - operations\n      + Fix setting the timestamp on Windows for multithread copy (Nick Craig-Wood)\n      + Make rcat obey --ignore-checksum (Nick Craig-Wood)\n      + Make --max-transfer more accurate (Nick Craig-Wood)\n    - rc\n      + Fix dropped error (Lars Lehtonen)\n      + Fix misplaced http server config (Xiaoxing Ye)\n      + Disable duplicate log (ElonH)\n    - serve dlna\n      + Cds: don't specify childCount at all when unknown (Dan Walters)\n      + Cds: use modification time as date in dlna metadata (Dan Walters)\n    - serve restic: Fix tests after restic project removed vendoring (Nick Craig-Wood)\n    - sync\n      + Fix incorrect 'nothing to transfer' message using --delete-before (Nick Craig-Wood)\n      + Only create empty directories when they don't exist on the remote (Ishuah Kariuki)\n  * Mount\n    - Add --async-read flag to disable asynchronous reads (Nick Craig-Wood)\n    - Ignore --allow-root flag with a warning as it has been removed upstream (Nick Craig-Wood)\n    - Warn if --allow-non-empty used on Windows and clarify docs (Nick Craig-Wood)\n    - Constrain to go1.13 or above otherwise bazil.org/fuse fails to compile (Nick Craig-Wood)\n    - Fix fail because of too long volume name (evileye)\n    - Report 1PB free for unknown disk sizes (Nick Craig-Wood)\n    - Map more rclone errors into file systems errors (Nick Craig-Wood)\n    - Fix disappearing cwd problem (Nick Craig-Wood)\n    - Use ReaddirPlus on Windows to improve directory listing performance (Nick Craig-Wood)\n    - Send a hint as to whether the filesystem is case insensitive or not (Nick Craig-Wood)\n    - Add rc command mount/types (Nick Craig-Wood)\n    - Change maximum leaf name length to 1024 bytes (Nick Craig-Wood)\n  * VFS\n    - Add --vfs-read-wait and --vfs-write-wait flags to control time waiting for a sequential read/write (Nick Craig-Wood)\n    - Change default --vfs-read-wait to 20ms (it was 5ms and not configurable) (Nick Craig-Wood)\n    - Make df output more consistent on a rclone mount. (Yves G)\n    - Report 1PB free for unknown disk sizes (Nick Craig-Wood)\n    - Fix race condition caused by unlocked reading of Dir.path (Nick Craig-Wood)\n    - Make File lock and Dir lock not overlap to avoid deadlock (Nick Craig-Wood)\n    - Implement lock ordering between File and Dir to eliminate deadlocks (Nick Craig-Wood)\n    - Factor the vfs cache into its own package (Nick Craig-Wood)\n    - Pin the Fs in use in the Fs cache (Nick Craig-Wood)\n    - Add SetSys() methods to Node to allow caching stuff on a node (Nick Craig-Wood)\n    - Ignore file not found errors from Hash in Read.Release (Nick Craig-Wood)\n    - Fix hang in read wait code (Nick Craig-Wood)\n  * Local\n    - Speed up multi thread downloads by using sparse files on Windows (Nick Craig-Wood)\n    - Implement --local-no-sparse flag for disabling sparse files (Nick Craig-Wood)\n    - Implement rclone backend noop for testing purposes (Nick Craig-Wood)\n    - Fix 'file not found' errors on post transfer Hash calculation (Nick Craig-Wood)\n  * Cache\n    - Implement rclone backend stats command (Nick Craig-Wood)\n    - Fix Server Side Copy with Temp Upload (Brandon McNama)\n    - Remove Unused Functions (Lars Lehtonen)\n    - Disable race tests until bbolt is fixed (Nick Craig-Wood)\n    - Move methods used for testing into test file (greatroar)\n    - Add Pin and Unpin and canonicalised lookup (Nick Craig-Wood)\n    - Use proper import path go.etcd.io/bbolt (Robert-André Mauchin)\n  * Crypt\n    - Calculate hashes for uploads from local disk (Nick Craig-Wood)\n      + This allows crypted Jottacloud uploads without using local disk\n      + This means crypted s3/b2 uploads will now have hashes\n    - Added rclone backend decode/encode commands to replicate functionality of cryptdecode (Anagh Kumar Baranwal)\n    - Get rid of the unused Cipher interface as it obfuscated the code (Nick Craig-Wood)\n  * Azure Blob\n    - Implement streaming of unknown sized files so rcat is now supported (Nick Craig-Wood)\n    - Implement memory pooling to control memory use (Nick Craig-Wood)\n    - Add --azureblob-disable-checksum flag (Nick Craig-Wood)\n    - Retry InvalidBlobOrBlock error as it may indicate block concurrency problems (Nick Craig-Wood)\n    - Remove unused Object.parseTimeString() (Lars Lehtonen)\n    - Fix permission error on SAS URL limited to container (Nick Craig-Wood)\n  * B2\n    - Add support for --header-upload and --header-download (Tim Gallant)\n    - Ignore directory markers at the root also (Nick Craig-Wood)\n    - Force the case of the SHA1 to lowercase (Nick Craig-Wood)\n    - Remove unused largeUpload.clearUploadURL() (Lars Lehtonen)\n  * Box\n    - Add support for --header-upload and --header-download (Tim Gallant)\n    - Implement About to read size used (Nick Craig-Wood)\n    - Add token renew function for jwt auth (David Bramwell)\n    - Added support for interchangeable root folder for Box backend (Sunil Patra)\n    - Remove unnecessary iat from jws claims (David)\n  * Drive\n    - Follow shortcuts by default, skip with --drive-skip-shortcuts (Nick Craig-Wood)\n    - Implement rclone backend shortcut command for creating shortcuts (Nick Craig-Wood)\n    - Added rclone backend command to change service_account_file and chunk_size (Anagh Kumar Baranwal)\n    - Fix missing files when using --fast-list and --drive-shared-with-me (Nick Craig-Wood)\n    - Fix duplicate items when using --drive-shared-with-me (Nick Craig-Wood)\n    - Extend --drive-stop-on-upload-limit to respond to teamDriveFileLimitExceeded. (harry)\n    - Don't delete files with multiple parents to avoid data loss (Nick Craig-Wood)\n    - Server side copy docs use default description if empty (Nick Craig-Wood)\n  * Dropbox\n    - Make error insufficient space to be fatal (harry)\n    - Add info about required redirect url (Elan Ruusamäe)\n  * Fichier\n    - Add support for --header-upload and --header-download (Tim Gallant)\n    - Implement custom pacer to deal with the new rate limiting (buengese)\n  * FTP\n    - Fix lockup when using concurrency limit on failed connections (Nick Craig-Wood)\n    - Fix lockup on failed upload when using concurrency limit (Nick Craig-Wood)\n    - Fix lockup on Close failures when using concurrency limit (Nick Craig-Wood)\n    - Work around pureftp sending spurious 150 messages (Nick Craig-Wood)\n  * Google Cloud Storage\n    - Add support for --header-upload and --header-download (Nick Craig-Wood)\n    - Add ARCHIVE storage class to help (Adam Stroud)\n    - Ignore directory markers at the root (Nick Craig-Wood)\n  * Googlephotos\n    - Make the start year configurable (Daven)\n    - Add support for --header-upload and --header-download (Tim Gallant)\n    - Create feature/favorites directory (Brandon Philips)\n    - Fix 'concurrent map write' error (Nick Craig-Wood)\n    - Don't put an image in error message (Nick Craig-Wood)\n  * HTTP\n    - Improved directory listing with new template from Caddy project (calisro)\n  * Jottacloud\n    - Implement --jottacloud-trashed-only (buengese)\n    - Add support for --header-upload and --header-download (Tim Gallant)\n    - Use RawURLEncoding when decoding base64 encoded login token (buengese)\n    - Implement cleanup (buengese)\n    - Update docs regarding cleanup, removed remains from old auth, and added warning about special mountpoints. (albertony)\n  * Mailru\n    - Describe 2FA requirements (valery1707)\n  * Onedrive\n    - Implement --onedrive-server-side-across-configs (Nick Craig-Wood)\n    - Add support for --header-upload and --header-download (Tim Gallant)\n    - Fix occasional 416 errors on multipart uploads (Nick Craig-Wood)\n    - Added maximum chunk size limit warning in the docs (Harry)\n    - Fix missing drive on config (Nick Craig-Wood)\n    - Make error quotaLimitReached to be fatal (harry)\n  * Opendrive\n    - Add support for --header-upload and --header-download (Tim Gallant)\n  * Pcloud\n    - Added support for interchangeable root folder for pCloud backend (Sunil Patra)\n    - Add support for --header-upload and --header-download (Tim Gallant)\n    - Fix initial config 'Auth state doesn't match' message (Nick Craig-Wood)\n  * Premiumizeme\n    - Add support for --header-upload and --header-download (Tim Gallant)\n    - Prune unused functions (Lars Lehtonen)\n  * Putio\n    - Add support for --header-upload and --header-download (Nick Craig-Wood)\n    - Make downloading files use the rclone http Client (Nick Craig-Wood)\n    - Fix parsing of remotes with leading and trailing / (Nick Craig-Wood)\n  * Qingstor\n    - Make rclone cleanup remove pending multipart uploads older than 24h (Nick Craig-Wood)\n    - Try harder to cancel failed multipart uploads (Nick Craig-Wood)\n    - Prune multiUploader.list() (Lars Lehtonen)\n    - Lint fix (Lars Lehtonen)\n  * S3\n    - Add support for --header-upload and --header-download (Tim Gallant)\n    - Use memory pool for buffer allocations (Maciej Zimnoch)\n    - Add SSE-C support for AWS, Ceph, and MinIO (Jack Anderson)\n    - Fail fast multipart upload (Michał Matczuk)\n    - Report errors on bucket creation (mkdir) correctly (Nick Craig-Wood)\n    - Specify that Minio supports URL encoding in listings (Nick Craig-Wood)\n    - Added 500 as retryErrorCode (Michał Matczuk)\n    - Use --low-level-retries as the number of SDK retries (Aleksandar Janković)\n    - Fix multipart abort context (Aleksandar Jankovic)\n    - Replace deprecated session.New() with session.NewSession() (Lars Lehtonen)\n    - Use the provided size parameter when allocating a new memory pool (Joachim Brandon LeBlanc)\n    - Use rclone's low level retries instead of AWS SDK to fix listing retries (Nick Craig-Wood)\n    - Ignore directory markers at the root also (Nick Craig-Wood)\n    - Use single memory pool (Michał Matczuk)\n    - Do not resize buf on put to memBuf (Michał Matczuk)\n    - Improve docs for --s3-disable-checksum (Nick Craig-Wood)\n    - Don't leak memory or tokens in edge cases for multipart upload (Nick Craig-Wood)\n  * Seafile\n    - Implement 2FA (Fred)\n  * SFTP\n    - Added --sftp-pem-key to support inline key files (calisro)\n    - Fix post transfer copies failing with 0 size when using set_modtime=false (Nick Craig-Wood)\n  * Sharefile\n    - Add support for --header-upload and --header-download (Tim Gallant)\n  * Sugarsync\n    - Add support for --header-upload and --header-download (Tim Gallant)\n  * Swift\n    - Add support for --header-upload and --header-download (Nick Craig-Wood)\n    - Fix cosmetic issue in error message (Martin Michlmayr)\n  * Union\n    - Implement multiple writable remotes (Max Sum)\n    - Fix server-side copy (Max Sum)\n    - Implement ListR (Max Sum)\n    - Enable ListR when upstreams contain local (Max Sum)\n  * WebDAV\n    - Add support for --header-upload and --header-download (Tim Gallant)\n    - Fix X-OC-Mtime header for Transip compatibility (Nick Craig-Wood)\n    - Report full and consistent usage with about (Yves G)\n  * Yandex\n    - Add support for --header-upload and --header-download (Tim Gallant)\n","id":"openSUSE-SU-2020:2008-1","modified":"2020-11-24T11:29:44Z","published":"2020-11-24T11:29:44Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7U7GCOTNOZAWDNUDHOMKJOI2QXP3XJCD/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1179005"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-28924"}],"related":["CVE-2020-28924"],"summary":"Security update for rclone","upstream":["CVE-2020-28924"]}