github.com/rclone/rclone

Releases

1. ▸▾v1.69.1-0.20250114204627-2c72842c100114 Jan 2025pre-release

   Nothing published for this version

2. ▸▾v1.69.1-0.20250112163112-b742705d0ccb12 Jan 2025pre-release

   Nothing published for this version

3. ▸▾v1.69.012 Jan 2025Security3 sources agree

   serve sftp: Resolve CVE-2024-45337 - Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass (dependabot)

   See commits

   • New backends

   • ICloud Drive (lostb1t)

   • Cloudinary (yuval-cloudinary)

   • New S3 providers:

   • Outscale (Matthias Gatto)

   • Selectel (Nick Craig-Wood)

   • Security fixes

   • serve sftp: Resolve CVE-2024-45337 - Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass (dependabot)

   • Rclone was not vulnerable to this.

   • See https://github.com/advisories/GHSA-v778-237x-gjrc

   • build: Update golang.org/x/net to v0.33.0 to fix CVE-2024-45338 - Non-linear parsing of case-insensitive content (Nick Craig-Wood)

   • Rclone was not vulnerable to this.

   • See https://github.com/advisories/GHSA-w32m-9786-jp63

   • New Features

   • accounting: Write the current bwlimit to the log on SIGUSR2 (Nick Craig-Wood)

   • bisync: Change exit code from 2 to 7 for critically aborted run (albertony)

   • build

   • Update all dependencies (Nick Craig-Wood)

   • Replace Windows-specific NewLazyDLL with NewLazySystemDLL (albertony)

   • cmd: Change exit code from 1 to 2 for syntax and usage errors (albertony)

   • docker serve: make sure all mount and VFS options are parsed (Nick Craig-Wood)

   • doc fixes (albertony, Alexandre Hamez, Anthony Metzidis, buengese, Dan McArdle, David Seifert, Francesco Frassinelli, Michael R. Davis, Nick Craig-Wood, Pawel Palucha, Randy Bush, remygrandin, Sam Harrison, shenpengfeng, tgfisher, Thomas ten Cate, ToM, Tony Metzidis, vintagefuture, Yxxx)

   • fs: Make --links flag global and add new --local-links and --vfs-links flags (Nick Craig-Wood)

   • http servers: Disable automatic authentication skipping for unix sockets in http servers (Moises Lima)

   • This was making it impossible to use unix sockets with an proxy

   • This might now cause rclone to need authentication where it didn't before

   • oauthutil: add support for OAuth client credential flow (Martin Hassack, Nick Craig-Wood)

   • operations: make log messages consistent for mkdir/rmdir at INFO level (Nick Craig-Wood)

   • rc: Add relative to vfs/queue-set-expiry (Nick Craig-Wood)

   • serve dlna: Sort the directory entries by directories first then alphabetically by name (Nick Craig-Wood)

   • serve nfs

   • Introduce symlink support (Nick Craig-Wood)

   • Implement --nfs-cache-type symlink (Nick Craig-Wood)

   • size: Make output compatible with -P (Nick Craig-Wood)

   • test makefiles: Add --flat flag for making directories with many entries (Nick Craig-Wood)

   • Bug Fixes

   • accounting

   • Fix global error acounting (Benjamin Legrand)

   • Fix debug printing when debug wasn't set (Nick Craig-Wood)

   • Fix race stopping/starting the stats counter (Nick Craig-Wood)

   • rc/job: Use mutex for adding listeners thread safety (hayden.pan)

   • serve docker: Fix incorrect GID assignment (TAKEI Yuya)

   • serve nfs: Fix missing inode numbers which was messing up ls -laR (Nick Craig-Wood)

   • serve s3: Fix Last-Modified timestamp (Nick Craig-Wood)

   • serve sftp: Fix loading of authorized keys file with comment on last line (albertony)

   • Mount

   • Introduce symlink support (Filipe Azevedo, Nick Craig-Wood)

   • Better snap mount error message (divinity76)

   • mount2: Fix missing . and .. entries (Filipe Azevedo)

   • VFS

   • With --vfs-used-is-size value is calculated and then thrown away (Ilias Ozgur Can Leonard)

   • Add symlink support to VFS (Filipe Azevedo, Nick Craig-Wood)

   • This can be enabled with the specific --vfs-links flag or the global --links flag

   • Fix open files disappearing from directory listings (Nick Craig-Wood)

   • Add remote name to vfs cache log messages (Nick Craig-Wood)

   • Cache

   • Fix parent not getting pinned when remote is a file (nielash)

   • Azure Blob

   • Add --azureblob-disable-instance-discovery (Nick Craig-Wood)

   • Add --azureblob-use-az to force the use of the Azure CLI for auth (Nick Craig-Wood)

   • Quit multipart uploads if the context is cancelled (Nick Craig-Wood)

   • Azurefiles

   • Fix missing x-ms-file-request-intent header (Nick Craig-Wood)

   • B2

   • Add daysFromStartingToCancelingUnfinishedLargeFiles to backend lifecycle command (Louis Laureys)

   • Box

   • Fix server-side copying a file over existing dst (nielash)

   • Fix panic when decoding corrupted PEM from JWT file (Nick Craig-Wood)

   • Drive

   • Add support for markdown format (Noam Ross)

   • Implement rclone backend rescue to rescue orphaned files (Nick Craig-Wood)

   • Dropbox

   • Fix server side copying over existing object (Nick Craig-Wood)

   • Fix return status when full to be fatal error (Nick Craig-Wood)

   • FTP

   • Implement --ftp-no-check-upload to allow upload to write only dirs (Nick Craig-Wood)

   • Fix ls commands returning empty on "Microsoft FTP Service" servers (Francesco Frassinelli)

   • Gofile

   • Fix server side copying over existing object (Nick Craig-Wood)

   • Google Cloud Storage

   • Add access token auth with --gcs-access-token (Leandro Piccilli)

   • Update docs on service account access tokens (Anthony Metzidis)

   • Googlephotos

   • Implement --gphotos-proxy to allow download of full resolution media (Nick Craig-Wood)

   • Fix nil pointer crash on upload (Nick Craig-Wood)

   • HTTP

   • Fix incorrect URLs with initial slash (Oleg Kunitsyn)

   • Onedrive

   • Add support for OAuth client credential flow (Martin Hassack, Nick Craig-Wood)

   • Fix time precision for OneDrive personal (Nick Craig-Wood)

   • Fix server side copying over existing object (Nick Craig-Wood)

   • Opendrive

   • Add rclone about support to backend (quiescens)

   • Oracle Object Storage

   • Make specifying compartmentid optional (Manoj Ghosh)

   • Quit multipart uploads if the context is cancelled (Nick Craig-Wood)

   • Pikpak

   • Add option to use original file links (wiserain)

   • Protondrive

   • Improve performance of Proton Drive backend (Lawrence Murray)

   • Putio

   • Fix server side copying over existing object (Nick Craig-Wood)

   • S3

   • Add initial --s3-directory-bucket to support AWS Directory Buckets (Nick Craig-Wood)

   • Add Wasabi eu-south-1 region (Diego Monti)

   • Fix download of compressed files from Cloudflare R2 (Nick Craig-Wood)

   • Rename glacier storage class to flexible retrieval (Henry Lee)

   • Quit multipart uploads if the context is cancelled (Nick Craig-Wood)

   • SFTP

   • Allow inline ssh public certificate for sftp (Dimitar Ivanov)

   • Fix nil check when using auth proxy (Nick Craig-Wood)

   • Smb

   • Add initial support for Kerberos authentication (more work needed). (Francesco Frassinelli)

   • Fix panic if stat fails (Nick Craig-Wood)

   • Sugarsync

   • Fix server side copying over existing object (Nick Craig-Wood)

   • WebDAV

   • Nextcloud: implement backoff and retry for 423 LOCKED errors (Nick Craig-Wood)

   • Make --webdav-auth-redirect to fix 401 unauthorized on redirect (Nick Craig-Wood)

   • Yandex

   • Fix server side copying over existing object (Nick Craig-Wood)

   • Zoho

   • Use download server to accelerate downloads (buengese)

   • Switch to large file upload API for larger files, fix missing URL encoding of filenames for the upload API (buengese)

   • Print clear error message when missing oauth scope (buengese)

   • Try to handle rate limits a bit better (buengese)

   • Add support for private spaces (buengese)

   • Make upload cutoff configurable (buengese)