rclone-dev:v1.49-fixes

Branch merges

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

17c21ae... by Nick Craig-Wood on 2019-10-05

Version v1.49.5

75cd733... by Nick Craig-Wood on 2019-10-05

build: fix macOS build after brew changes

b5ea6af... by Nick Craig-Wood on 2019-10-02

build: revert back to go1.12 for the v1.49.x builds

The go1.13 build has had various problems reported so revert back to
go1.12 for the stable branch.

See: https://forum.rclone.org/t/1-49-4-plex-internal-errors-on-google-drive/12108
Fixes #3578

d872944... by Nick Craig-Wood on 2019-10-01

build: use the release builds not master of nfpm and github-release

Fixes #3580

5ac39c2... by Nick Craig-Wood on 2019-10-01

bin/get-github-release: support tar.bz2 files

8aae042... by Nick Craig-Wood on 2019-09-29

Version v1.49.4

d9bdd05... by terorie on 2019-09-28

cmd/rcd: Address ZipSlip vulnerability

Don't create files outside of target
directory while unzipping.

Fixes #3529 reported by Nico Waisman at Semmle Security Team

b3cafe8... by Nick Craig-Wood on 2019-09-09

s3: fix SetModTime on GLACIER/ARCHIVE objects and implement set/get tier

- Read the storage class for each object
- Implement SetTier/GetTier
- Check the storage class on the **object** before using SetModTime

This updates the fix in 1a2fb52 so that SetModTime works when you are
using objects which have been migrated to GLACIER but you aren't using
GLACIER as a storage class.

Fixes #3522

a7a4666... by Nick Craig-Wood on 2019-09-27

oauthutil: fix security problem when running with two users on the same machine

Before this change two users could run `rclone config` for the same
backend on the same machine at the same time.

User A would get as far as starting the web server. User B would then
fail to start the webserver, but it would open the browser on the
/auth URL which would redirect the user to the login. This would then
cause user B to authenticate to user A's rclone.

This changes fixes the problem in two ways.

Firstly it passes the state to the /auth call before redirecting and
checks it there, erroring with a 403 error if it doesn't match. This
would have fixed the problem on its own.

Secondly it delays the opening of the web browser until after the auth
webserver has started which prevents the user entering the credentials
if another auth server is running.

Fixes #3573

54d409a... by Nick Craig-Wood on 2019-09-28

ftp: fix listing of an empty root returning: error dir not found

Before this change if rclone listed an empty root directory then it
would return an error dir not found.

After this change we assume the root directory exists and don't
attempt to check it which was failing before.

See: https://forum.rclone.org/t/ftp-empty-directory-yields-directory-not-found-error/12069/