[Bug 1099926] VUL-0: CVE-2018-12907: rclone: improper URL validation while migrating data between two storage buckets

http://bugzilla.suse.com/show_bug.cgi?id=1099926 http://bugzilla.suse.com/show_bug.cgi?id=1099926#c1 --- Comment #1 from Aleksa Sarai <asarai@suse.com> --- [1] is the upstream issue for this CVE. As far as I can tell, the maintainer believes that the exploitability of this issue is quite low because it requires being able to modify responses made over TLS. But they are still working on a solution AFAICS. [1]: https://github.com/ncw/rclone/issues/2376 -- You are receiving this mail because: You are on the CC list for the bug.