Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-79777 →

DEBIAN-CVE-2026-79777

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file pa...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 rclone

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 rclone

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org