rclone (1.53.3-4ubuntu1.22.04.5) jammy-security; urgency=medium

  * SECURITY UPDATE: unauthenticated remote command execution in rcd
    (LP: #2160382)
    - d/p/CVE-2026-49980.patch: Disable unauthenticated inline remotes
    - CVE-2026-49980

 -- Wesley Hershberger <wesley.hershberger@canonical.com>  Thu, 23 Jul 2026 14:21:14 -0500

rclone (1.53.3-4ubuntu1.22.04.4) jammy-security; urgency=medium

  * SECURITY UPDATE: authentication bypass in rcd leading to sensitive
    operations and/or remote command execution (LP: #2152913)
    - debian/patches/CVE-2026-41176.patch
    - debian/patches/CVE-2026-41176-2.patch
    - CVE-2026-41176

 -- Wesley Hershberger <wesley.hershberger@canonical.com>  Mon, 18 May 2026 12:02:37 -0500

rclone (1.53.3-4ubuntu1.22.04.3) jammy-security; urgency=medium

  * No change rebuild due to golang-1.18 update

 -- Allen Huang <allen.huang@canonical.com>  Fri, 15 Nov 2024 23:08:32 +0000

rclone (1.53.3-4ubuntu1.22.04.2) jammy-security; urgency=medium

  * No change build due to golang-1.18 update

 -- Nishit Majithia <nishit.majithia@canonical.com>  Wed, 03 May 2023 13:55:41 +0530

rclone (1.53.3-4ubuntu1.22.04.1) jammy-security; urgency=medium

  * No-change rebuild for golang-golang-x-text

 -- Eduardo Barretto <eduardo.barretto@canonical.com>  Fri, 03 Feb 2023 15:32:09 +0100

rclone (1.53.3-4ubuntu1) jammy; urgency=medium

  * d/p/0008-fix-gdrive-download.patch: remove check for size, so google
    docs are identified solely by not having an MD5 checksum
    (LP: #1937136)

 -- Andreas Hasenack <andreas@canonical.com>  Mon, 28 Mar 2022 18:45:23 -0300

rclone (1.53.3-4) unstable; urgency=medium

  * Team upload.
  * Add logrus to the dependencies of the development package.
  * Switch to dh-sequence-*.
  * Add missing build dependency on go-homedir.

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 31 Dec 2021 21:12:35 +0100

rclone (1.53.3-3) unstable; urgency=medium

  * Team upload.
  * Add missing build dependency on logrus (Closes: #1002271).

 -- Andrej Shadura <andrewsh@debian.org>  Fri, 31 Dec 2021 20:37:35 +0100

rclone (1.53.3-2) unstable; urgency=medium

  * Team upload.

  [ Thomas Goirand ]
  * Add "Infomaniak kDrive" as possible provider in the package long desc.

  [ Debian Janitor ]
  * Remove constraints unnecessary since buster:
    + Build-Depends: Drop versioned constraint on
      golang-github-jlaffaye-ftp-dev.
    + golang-github-rclone-rclone-dev: Drop versioned constraint on
      golang-github-jlaffaye-ftp-dev and golang-github-okzk-sdnotify-dev in
      Depends.
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.
  * Update standards version to 4.6.0, no changes needed.

  [ Andrej Shadura ]
  * Backport fix for upstream issue #5632 (move operation for union mounts)
  * Don’t set XDG_{CONFIG,CACHE}_HOME since debhelper already does.
  * Don’t fail to build when tests fail, since there are spurious failures.

 -- Andrej Shadura <andrewsh@debian.org>  Sun, 31 Oct 2021 10:56:03 +0100

rclone (1.53.3-1) unstable; urgency=medium

  * Team upload.
  * New upstream version 1.53.3
    Closes: #975324 CVE-2020-28924
  * Bump debhelper-compat to 13
  * Bump Standards-Version to 4.5.1 (no changes)
  * Change devel package Section to golang

 -- Shengjing Zhu <zhsj@debian.org>  Fri, 27 Nov 2020 02:07:54 +0800

# For older changelog entries, run 'apt-get changelog golang-github-rclone-rclone-dev'
