rclone
詳細情報
| タイトル | rclone |
|---|---|
| URL | https://rclone.org/ |
| バージョン | ver 1.75.1 |
| 更新日 | 2026/09/05 |
| 追加日 | 2016/09/03 |
| 種別 | フリーソフト |
| 説明 | クラウドストレージ版のrsync。 |
レビュー
概要
rcloneは、Go言語で開発されたオープンソースのコマンドラインツールで、クラウドストレージとローカルストレージ間のファイル同期・転送・バックアップを行います。2012年頃にNick Craigによって開発が開始され、「クラウドのrsync」とも呼ばれるほど強力かつ柔軟な機能を備えています。Google Drive、Amazon S3、Dropbox、OneDrive、Box、WebDAV、FTPなど90種類以上のストレージサービスに対応しており、クラウドサービス間の直接転送も可能です。MITライセンスのもと完全無料で提供されています。
主要な特徴・機能
- 幅広いストレージ対応: Google Drive、Amazon S3、Dropbox、OneDrive、Box、Backblaze B2、WebDAV、SFTP、FTPなど90種類以上のサービスに対応
- クラウド間転送: ローカル↔クラウドだけでなく、クラウド↔クラウド間の直接ファイル転送が可能
- 差分同期（sync）: rsyncに類似した差分同期機能で、変更されたファイルのみを効率的に転送
- 暗号化（crypt）: クラウド上のファイルをrclone独自の暗号化方式でエンドツーエンド暗号化して保存
- マウント機能（mount）: クラウドストレージをローカルドライブとしてマウントし、通常のファイルシステムとして利用可能
- 帯域幅制御: 転送速度の上限設定や転送スケジューリングに対応
- ファイルフィルタリング: ファイル名パターン、サイズ、更新日時によるフィルタリング
- 並列転送: 複数ファイルの並列転送によるパフォーマンス向上
- チェックサム検証: ファイルの整合性をチェックサムで検証
- 設定の暗号化: 接続情報をGPGで暗号化して設定ファイルに保存可能
- クロスプラットフォーム: Windows、macOS、Linux、BSD等に対応
対象ユーザー
- クラウドストレージ間のデータ移行・同期を自動化したいシステム管理者
- 自動バックアップシステムを構築したいエンジニア・開発者
- 複数のクラウドサービスを横断的に管理したいパワーユーザー
- データのプライバシーを重視し、クラウドへの暗号化保存を求めるユーザー
ライセンス情報
- ライセンス: MITライセンス（完全無料・オープンソース）
- ソースコード: GitHub（https://github.com/rclone/rclone）にて公開
- 開発言語: Go（Golang）
- 開発元: Nick Craig-Wood（コミュニティ貢献）
- 公式サイト: https://rclone.org/
スクリーンショット
スクリーンショットはありません。
更新グラフ
バージョン履歴
v1.75.1 - 2026-09-04
v1.75.1 - 2026-09-04
See commits
Security
archive
Fix zip slip path traversal in untrusted zip files GHSA-66hp-wgxq-6f5q CVE-PENDING (Nick Craig-Wood)
Hide any archive entry which escapes the directory being listed GHSA-66hp-wgxq-6f5q (Nick Craig-Wood)
Reject unsafe entry names when mounting squashfs images GHSA-66hp-wgxq-6f5q (Nick Craig-Wood)
Fix zip subdirectory root matching sibling directories GHSA-66hp-wgxq-6f5q (Nick Craig-Wood)
Fix zip entry named "." hiding every other file GHSA-66hp-wgxq-6f5q (Nick Craig-Wood)
Fix "directory not found" for archive paths containing "./" or "//" GHSA-66hp-wgxq-6f5q (Nick Craig-Wood)
build
Fix multiple CVEs by upgrading to go1.26.6 (Nick Craig-Wood)
CVE-2026-56860: net/url: quadratic complexity in resolvePath
CVE-2026-56858: html/template: JavaScript regexp context tracking
CVE-2026-56862: crypto/tls: limit handshake messages accepted post-handshake
CVE-2026-56853: net/http: apply ReadHeaderTimeout to unencrypted HTTP/2 check
CVE-2026-56859: encoding/xml: recursion depth guard during decode
CVE-2026-33818: encoding/asn1: enforce maximum recursion depth
(省略されました)
v1.75.1 - 2026-09-04
See commits
Security
archive
Fix zip slip path traversal in untrusted zip files GHSA-66hp-wgxq-6f5q CVE-PENDING (Nick Craig-Wood)
Hide any archive entry which escapes the directory being listed GHSA-66hp-wgxq-6f5q (Nick Craig-Wood)
Reject unsafe entry names when mounting squashfs images GHSA-66hp-wgxq-6f5q (Nick Craig-Wood)
Fix zip subdirectory root matching sibling directories GHSA-66hp-wgxq-6f5q (Nick Craig-Wood)
Fix zip entry named "." hiding every other file GHSA-66hp-wgxq-6f5q (Nick Craig-Wood)
Fix "directory not found" for archive paths containing "./" or "//" GHSA-66hp-wgxq-6f5q (Nick Craig-Wood)
build
Fix multiple CVEs by upgrading to go1.26.6 (Nick Craig-Wood)
CVE-2026-56860: net/url: quadratic complexity in resolvePath
CVE-2026-56858: html/template: JavaScript regexp context tracking
CVE-2026-56862: crypto/tls: limit handshake messages accepted post-handshake
CVE-2026-56853: net/http: apply ReadHeaderTimeout to unencrypted HTTP/2 check
CVE-2026-56859: encoding/xml: recursion depth guard during decode
CVE-2026-33818: encoding/asn1: enforce maximum recursion depth
(省略されました)
v1.75.0 - 2026-07-31
v1.75.0 - 2026-07-31
See commits
New S3 Providers
Scality (RING / ARTESCA)
Zero Services (ZERO-Z3)
Security
archive: Don't crash on malformed squashfs images GHSA-6jcg-q3wp-x2f4 CVE-PENDING (Nick Craig-Wood)
ftp: Fix ftp command injection when encoding doesn't include CRLF GHSA-8c48-q9wj-3w37 CVE-PENDING (Nick Craig-Wood)
lib/http: Use TLS on all --addr listeners when --cert and --key are set GHSA-mfvx-7rcj-9m5g (Nick Craig-Wood)
lib/proxy: Fix unbounded HTTP CONNECT headers causing OOM GHSA-xhf4-832v-7xcr CVE-PENDING (Nick Craig-Wood)
local: Stop source file names escaping the destination directory GHSA-7p4m-qxvv-g567 CVE-PENDING (Nick Craig-Wood)
rc
Don't expose pprof debug handlers on an unauthenticated server GHSA-mfvx-7rcj-9m5g CVE-PENDING (Nick Craig-Wood)
Require authentication to list the remotes with --rc-serve GHSA-mfvx-7rcj-9m5g (Nick Craig-Wood)
Fix leaking stack traces on panics GHSA-gwfq-86j8-7qhv (Nick Craig-Wood)
s3
Fix redirect credential leaks, reject HTTPS->HTTP and strip secrets GHSA-8mxv-9xhp-86h4 (Nick Craig-Wood)
Strip S3 Express session token on cross-host redirects GHSA-8mxv-9xhp-86h4 (Nick Craig-Wood)
(省略されました)
v1.75.0 - 2026-07-31
See commits
New S3 Providers
Scality (RING / ARTESCA)
Zero Services (ZERO-Z3)
Security
archive: Don't crash on malformed squashfs images GHSA-6jcg-q3wp-x2f4 CVE-PENDING (Nick Craig-Wood)
ftp: Fix ftp command injection when encoding doesn't include CRLF GHSA-8c48-q9wj-3w37 CVE-PENDING (Nick Craig-Wood)
lib/http: Use TLS on all --addr listeners when --cert and --key are set GHSA-mfvx-7rcj-9m5g (Nick Craig-Wood)
lib/proxy: Fix unbounded HTTP CONNECT headers causing OOM GHSA-xhf4-832v-7xcr CVE-PENDING (Nick Craig-Wood)
local: Stop source file names escaping the destination directory GHSA-7p4m-qxvv-g567 CVE-PENDING (Nick Craig-Wood)
rc
Don't expose pprof debug handlers on an unauthenticated server GHSA-mfvx-7rcj-9m5g CVE-PENDING (Nick Craig-Wood)
Require authentication to list the remotes with --rc-serve GHSA-mfvx-7rcj-9m5g (Nick Craig-Wood)
Fix leaking stack traces on panics GHSA-gwfq-86j8-7qhv (Nick Craig-Wood)
s3
Fix redirect credential leaks, reject HTTPS->HTTP and strip secrets GHSA-8mxv-9xhp-86h4 (Nick Craig-Wood)
Strip S3 Express session token on cross-host redirects GHSA-8mxv-9xhp-86h4 (Nick Craig-Wood)
(省略されました)
v1.74.4 - 2026-07-08
v1.74.4 - 2026-07-08
See commits
Bug Fixes
accounting
Fix goroutine leak in ResetCounters (Nick Craig-Wood)
Fix goroutine leak in NewStatsGroup for zero-transfer rc jobs (Sanjays2402)
archive extract: Fix path traversal letting archives escape the destination CVE-2026-59732 (Nick Craig-Wood)
build
Fix multiple CVEs by upgrading to go1.26.5 (Nick Craig-Wood)
CVE-2026-39822: os: Root escape via symlink plus trailing slash
CVE-2026-42505: crypto/tls: Encrypted Client Hello privacy leak
Update golang.org/x/image to v0.43.0 to fix image decoding vulnerabilities (Nick Craig-Wood)
CVE-2026-46604: panic decoding a TIFF image with an out-of-bounds strip offset
CVE-2026-46602: unbounded memory use from lack of a limit on TIFF tile sizes
CVE-2026-46601: panic on a WEBP VP8 alpha channel size mismatch
CVE-2026-33813: panic decoding a large WEBP image on 32-bit platforms
cmd/mount2
Fix NFS file creation by implementing Mknod (Sandy Luppino)
(省略されました)
v1.74.4 - 2026-07-08
See commits
Bug Fixes
accounting
Fix goroutine leak in ResetCounters (Nick Craig-Wood)
Fix goroutine leak in NewStatsGroup for zero-transfer rc jobs (Sanjays2402)
archive extract: Fix path traversal letting archives escape the destination CVE-2026-59732 (Nick Craig-Wood)
build
Fix multiple CVEs by upgrading to go1.26.5 (Nick Craig-Wood)
CVE-2026-39822: os: Root escape via symlink plus trailing slash
CVE-2026-42505: crypto/tls: Encrypted Client Hello privacy leak
Update golang.org/x/image to v0.43.0 to fix image decoding vulnerabilities (Nick Craig-Wood)
CVE-2026-46604: panic decoding a TIFF image with an out-of-bounds strip offset
CVE-2026-46602: unbounded memory use from lack of a limit on TIFF tile sizes
CVE-2026-46601: panic on a WEBP VP8 alpha channel size mismatch
CVE-2026-33813: panic decoding a large WEBP image on 32-bit platforms
cmd/mount2
Fix NFS file creation by implementing Mknod (Sandy Luppino)
(省略されました)
v1.74.3 - 2026-06-05
v1.74.3 - 2026-06-05
See commits
Bug Fixes
rc
Fix unauthenticated command execution via --rc-serve inline remotes CVE-2026-49980 (Nick Craig-Wood)
Stop global.* connection string options changing config CVE-2026-49980 (Nick Craig-Wood)
build: Fix multiple CVEs by upgrading to go1.26.4 (Nick Craig-Wood)
CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader
CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping
CVE-2026-27145: crypto/x509: split candidate hostname only once
log: Fix wrong source file:line in JSON logs from release builds (Nick Craig-Wood)
mount2: Fix empty directory listings on re-read (Janne Beate Bakeng)
serve s3: Fix multipart ListParts pagination returning wrong part numbers (Nick Craig-Wood)
serve sftp
Fix file corruption when a client resumes an upload (Nick Craig-Wood)
Fix truncate request being silently ignored (Nick Craig-Wood)
Local
Fix getXattr returning empty map instead of nil (Leon Brocard)
(省略されました)
v1.74.3 - 2026-06-05
See commits
Bug Fixes
rc
Fix unauthenticated command execution via --rc-serve inline remotes CVE-2026-49980 (Nick Craig-Wood)
Stop global.* connection string options changing config CVE-2026-49980 (Nick Craig-Wood)
build: Fix multiple CVEs by upgrading to go1.26.4 (Nick Craig-Wood)
CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader
CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping
CVE-2026-27145: crypto/x509: split candidate hostname only once
log: Fix wrong source file:line in JSON logs from release builds (Nick Craig-Wood)
mount2: Fix empty directory listings on re-read (Janne Beate Bakeng)
serve s3: Fix multipart ListParts pagination returning wrong part numbers (Nick Craig-Wood)
serve sftp
Fix file corruption when a client resumes an upload (Nick Craig-Wood)
Fix truncate request being silently ignored (Nick Craig-Wood)
Local
Fix getXattr returning empty map instead of nil (Leon Brocard)
(省略されました)
v1.74.2 - 2026-05-22
v1.74.2 - 2026-05-22
See commits
Bug Fixes
build
Update golang.org/x/net to v0.55.0 to address:
CVE-2026-42506: html: incorrect handling of namespaced elements in foreign content
CVE-2026-39821: idna: failure to reject ASCII-only Punycode-encoded labels
CVE-2026-42502: html: incorrect handling of HTML elements in foreign content
CVE-2026-25680: html: denial of service when parsing arbitrary HTML
CVE-2026-25681: html: incorrect handling of character references in DOCTYPE nodes
CVE-2026-27136: html: duplicate attributes can cause XSS
Update golang.org/x/crypto to v0.52.0 to address:
CVE-2026-46598: ssh/agent: pathological inputs can lead to client panic
CVE-2026-46597: ssh: byte arithmetic causes underflow and panic
CVE-2026-39828: ssh: bypass of certificate restrictions
CVE-2026-39835: ssh: server panic during CheckHostKey/Authenticate
CVE-2026-39833: ssh/agent: key constraints not enforced
CVE-2026-39832: ssh/agent: agent constraints dropped when forwarding keys
(省略されました)
v1.74.2 - 2026-05-22
See commits
Bug Fixes
build
Update golang.org/x/net to v0.55.0 to address:
CVE-2026-42506: html: incorrect handling of namespaced elements in foreign content
CVE-2026-39821: idna: failure to reject ASCII-only Punycode-encoded labels
CVE-2026-42502: html: incorrect handling of HTML elements in foreign content
CVE-2026-25680: html: denial of service when parsing arbitrary HTML
CVE-2026-25681: html: incorrect handling of character references in DOCTYPE nodes
CVE-2026-27136: html: duplicate attributes can cause XSS
Update golang.org/x/crypto to v0.52.0 to address:
CVE-2026-46598: ssh/agent: pathological inputs can lead to client panic
CVE-2026-46597: ssh: byte arithmetic causes underflow and panic
CVE-2026-39828: ssh: bypass of certificate restrictions
CVE-2026-39835: ssh: server panic during CheckHostKey/Authenticate
CVE-2026-39833: ssh/agent: key constraints not enforced
CVE-2026-39832: ssh/agent: agent constraints dropped when forwarding keys
(省略されました)
v1.74.1 - 2026-05-08
v1.74.1 - 2026-05-08
See commits
Bug Fixes
bisync: Fix retryable without --resync error message when --resync has a critical failure (Gustavo V. F.)
build
Fix multiple CVEs by upgrading to go1.26.3 (Nick Craig-Wood)
CVE-2026-42501: cmd/go: malicious module proxy can bypass checksum database
CVE-2026-39825: net/http/httputil: ReverseProxy forwards queries with more than urlmaxqueryparams parameters
CVE-2026-39836: net: panic in Dial and LookupPort when handling NUL byte on Windows
CVE-2026-42499: net/mail: quadratic string concatenation in consumePhrase
CVE-2026-39820: net/mail: quadratic string concatentation in consumeComment
CVE-2026-39819: cmd/go: "go bug" follows symlinks in predictable temporary filenames
CVE-2026-39817: cmd/go: "go tool pack" does not sanitize output paths
CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE
CVE-2026-39826: html/template: escaper bypass leads to XSS
CVE-2026-33811: net: crash when handling long CNAME response
CVE-2026-39823: html/template: bypass of meta content URL escaping causes XSS
Update golang.org/x/net to v0.53.0 to fix CVE-2026-33814 (Nick Craig-Wood)
(省略されました)
v1.74.1 - 2026-05-08
See commits
Bug Fixes
bisync: Fix retryable without --resync error message when --resync has a critical failure (Gustavo V. F.)
build
Fix multiple CVEs by upgrading to go1.26.3 (Nick Craig-Wood)
CVE-2026-42501: cmd/go: malicious module proxy can bypass checksum database
CVE-2026-39825: net/http/httputil: ReverseProxy forwards queries with more than urlmaxqueryparams parameters
CVE-2026-39836: net: panic in Dial and LookupPort when handling NUL byte on Windows
CVE-2026-42499: net/mail: quadratic string concatenation in consumePhrase
CVE-2026-39820: net/mail: quadratic string concatentation in consumeComment
CVE-2026-39819: cmd/go: "go bug" follows symlinks in predictable temporary filenames
CVE-2026-39817: cmd/go: "go tool pack" does not sanitize output paths
CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE
CVE-2026-39826: html/template: escaper bypass leads to XSS
CVE-2026-33811: net: crash when handling long CNAME response
CVE-2026-39823: html/template: bypass of meta content URL escaping causes XSS
Update golang.org/x/net to v0.53.0 to fix CVE-2026-33814 (Nick Craig-Wood)
(省略されました)
Installation
Usage
Filtering
GUI
Remote Control
Remote Setup
Changelog
Bugs
FAQ
Flags
Licence
Authors
Privacy Policy
Overview
rclone
rclone about
rclone archive
rclone authorize
rclone backend
(省略されました)
Usage
Filtering
GUI
Remote Control
Remote Setup
Changelog
Bugs
FAQ
Flags
Licence
Authors
Privacy Policy
Overview
rclone
rclone about
rclone archive
rclone authorize
rclone backend
(省略されました)
v1.73.5 - 2026-04-19
See commits
Bug Fixes
operations: Add AuthRequired to operations/fsinfo to prevent backend creation CVE-2026-41179 (Nick Craig-Wood)
rc
Add AuthRequired to options/set to prevent auth bypass CVE-2026-41176 (Nick Craig-Wood)
Snapshot NoAuth at startup to prevent runtime auth bypass CVE-2026-41176 (Nick Craig-Wood)
filter: Fix debug logs that fire before logger is configured (Nick Craig-Wood)
Azureblob
Add Microsoft Partner Network User-Agent prefix (Nick Craig-Wood)
Drime
Fix User.EntryPermissions JSON unmarshalling (a1pcm)
Iclouddrive
Fix 'directory not found' error when the directory contains accent marks (Brais Couce)
S3
Fix TencentCOS CDN endpoint failing on bucket check (Mozi)
Fix empty delimiter parameter rejected by Archiware P5 server (Nick Craig-Wood)
v1.73.5 - 2026-04-19
last updated 2026-04-19
See commits
Bug Fixes
operations: Add AuthRequired to operations/fsinfo to prevent backend creation CVE-2026-41179 (Nick Craig-Wood)
rc
Add AuthRequired to options/set to prevent auth bypass CVE-2026-41176 (Nick Craig-Wood)
Snapshot NoAuth at startup to prevent runtime auth bypass CVE-2026-41176 (Nick Craig-Wood)
filter: Fix debug logs that fire before logger is configured (Nick Craig-Wood)
Azureblob
Add Microsoft Partner Network User-Agent prefix (Nick Craig-Wood)
Drime
Fix User.EntryPermissions JSON unmarshalling (a1pcm)
Iclouddrive
Fix 'directory not found' error when the directory contains accent marks (Brais Couce)
S3
Fix TencentCOS CDN endpoint failing on bucket check (Mozi)
Fix empty delimiter parameter rejected by Archiware P5 server (Nick Craig-Wood)
v1.73.5 - 2026-04-19
last updated 2026-04-19
v1.73.4 - 2026-04-08
See commits
Bug Fixes
build
Update to go 1.25.9 to fix multiple CVEs (Nick Craig-Wood)
CVE-2026-32282: os: Root.Chmod can follow symlinks out of the root on Linux
CVE-2026-32289: html/template: JS template literal context incorrectly tracked
CVE-2026-33810: crypto/x509: excluded DNS constraints not properly applied to wildcard domains
CVE-2026-27144: cmd/compile: no-op interface conversion bypasses overlap checking
CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination
CVE-2026-32288: archive/tar: unbounded allocation when parsing old format GNU sparse map
CVE-2026-32283: crypto/tls: multiple key update handshake messages can cause connection to deadlock
CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG
CVE-2026-32280: crypto/x509: unexpected work during chain building
CVE-2026-32281: crypto/x509: inefficient policy validation
Fix Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder (dependabot[bot])
Update golang.org/x/image to 0.38.0 to fix CVE-2026-33809 (dependabot[bot])
docs
Fix header level for metadata option (Clément Notin)
(省略されました)
See commits
Bug Fixes
build
Update to go 1.25.9 to fix multiple CVEs (Nick Craig-Wood)
CVE-2026-32282: os: Root.Chmod can follow symlinks out of the root on Linux
CVE-2026-32289: html/template: JS template literal context incorrectly tracked
CVE-2026-33810: crypto/x509: excluded DNS constraints not properly applied to wildcard domains
CVE-2026-27144: cmd/compile: no-op interface conversion bypasses overlap checking
CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination
CVE-2026-32288: archive/tar: unbounded allocation when parsing old format GNU sparse map
CVE-2026-32283: crypto/tls: multiple key update handshake messages can cause connection to deadlock
CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG
CVE-2026-32280: crypto/x509: unexpected work during chain building
CVE-2026-32281: crypto/x509: inefficient policy validation
Fix Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder (dependabot[bot])
Update golang.org/x/image to 0.38.0 to fix CVE-2026-33809 (dependabot[bot])
docs
Fix header level for metadata option (Clément Notin)
(省略されました)
v1.73.3 - 2026-03-23
See commits
Bug Fixes
build
Update to google.golang.org/grpc 1.79.3 to fix CVE-2026-33186 (dependabot[bot])
Update to github.com/buger/jsonparser 1.1.2 to fix GHSA-6g7g-w4f8-9c9x (dependabot[bot])
doc fixes
Added text to the label showing version-introduced info (Jan-Philipp Reßler)
Clarify Filen password change requires updating both password and API key in rclone config (Jason)
s3: clarify multi tenant support for Cubbit (Marco Ferretti)
jottacloud: Fix broken link (albertony)
lib/rest: Fix URLPathEscapeAll breaking WebDAV servers (eg nzbdav) with strict path matching (Andrew Furman)
list: Fix nil pointer panic in Sorter when temp file creation fails (Nick Craig-Wood)
v1.73.3 - 2026-03-23
last updated 2026-03-23
See commits
Bug Fixes
build
Update to google.golang.org/grpc 1.79.3 to fix CVE-2026-33186 (dependabot[bot])
Update to github.com/buger/jsonparser 1.1.2 to fix GHSA-6g7g-w4f8-9c9x (dependabot[bot])
doc fixes
Added text to the label showing version-introduced info (Jan-Philipp Reßler)
Clarify Filen password change requires updating both password and API key in rclone config (Jason)
s3: clarify multi tenant support for Cubbit (Marco Ferretti)
jottacloud: Fix broken link (albertony)
lib/rest: Fix URLPathEscapeAll breaking WebDAV servers (eg nzbdav) with strict path matching (Andrew Furman)
list: Fix nil pointer panic in Sorter when temp file creation fails (Nick Craig-Wood)
v1.73.3 - 2026-03-23
last updated 2026-03-23
v1.73.2 - 2026-03-06
See commits
Bug Fixes
build
Update to go 1.25.8 to fix CVE-2026-27137 CVE-2026-27138 CVE-2026-25679 CVE-2026-27142 (Nick Craig-Wood)
Update github.com/cloudflare/circl to v1.6.3 to fix CVE-2026-1229 (Nick Craig-Wood)
Update to golang.org/x/net v0.51.0 to fix CVE-2026-27141 (Nick Craig-Wood)
docs fixes:
bisync: Add group Sync to the bisync command (Jan-Philipp Reßler)
Note that --use-server-modtime only works on some backends (Nick Craig-Wood)
Document unsupported S3 object keys with double slashes (Adam Kasztenny)
Fix headers hierarchy for mount.md (Dark Dragon)
Fix new drive flag typo in changelog (razorloves)
Archive
Extract: fix extraction with "./" prefix from tar entry paths (Varun Chawla)
Drime
Fix chunk-uploaded files ignoring workspace ID (a1pcm)
Internxt
Fix Entry doesn't belong in directory errors on windows (jzunigax2)
(省略されました)
See commits
Bug Fixes
build
Update to go 1.25.8 to fix CVE-2026-27137 CVE-2026-27138 CVE-2026-25679 CVE-2026-27142 (Nick Craig-Wood)
Update github.com/cloudflare/circl to v1.6.3 to fix CVE-2026-1229 (Nick Craig-Wood)
Update to golang.org/x/net v0.51.0 to fix CVE-2026-27141 (Nick Craig-Wood)
docs fixes:
bisync: Add group Sync to the bisync command (Jan-Philipp Reßler)
Note that --use-server-modtime only works on some backends (Nick Craig-Wood)
Document unsupported S3 object keys with double slashes (Adam Kasztenny)
Fix headers hierarchy for mount.md (Dark Dragon)
Fix new drive flag typo in changelog (razorloves)
Archive
Extract: fix extraction with "./" prefix from tar entry paths (Varun Chawla)
Drime
Fix chunk-uploaded files ignoring workspace ID (a1pcm)
Internxt
Fix Entry doesn't belong in directory errors on windows (jzunigax2)
(省略されました)
RSS[全体]
Tw[@softantenna]