-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 19 Oct 2026 06:13:44 -0400 Source: rclone Architecture: source Version: 1.75.2-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Reinhard Tartler <siretart@tauware.de> Closes: 1134734 1134735 1140817 1142269 1143842 1145670 1147404 1148669 1150968 Changes: rclone (1.75.2-1) unstable; urgency=medium . * Team upload. * Fixes security vulnerabilities: - CVE-2026-41176 (Closes: #1134734) - CVE-2026-41179 (Closes: #1134735) - CVE-2026-49980 (Closes: #1140817) - CVE-2026-54572, CVE-2026-59732, CVE-2026-59733 (Closes: #1142269) - CVE-2026-71309, CVE-2026-71310, CVE-2026-71311, CVE-2026-71312, CVE-2026-71313 (Closes: #1143842) - CVE-2026-79775, CVE-2026-79776, CVE-2026-79777, CVE-2026-79778, CVE-2026-79779, CVE-2026-79780, CVE-2026-79781, CVE-2026-79782, CVE-2026-79783 (Closes: #1145670) - CVE-2026-88013, CVE-2026-88014, CVE-2026-88015, CVE-2026-88016, CVE-2026-88017, CVE-2026-88018, CVE-2026-88044, CVE-2026-88045, CVE-2026-88046 (Closes: #1147404) - CVE-2026-93986, CVE-2026-93987 (Closes: #1148669) * Refresh patches against upstream 1.75.2. * dlna: use slog.Default() for ssdp.Server.Logger (Closes: #1150968). * debian/control: - Add golang-github-wk8-go-ordered-map-dev to Build-Depends and Depends. - Replace obsolete golang-gopkg-yaml.v2-dev with golang-gopkg-yaml.v3-dev. - Drop obsolete golang-github-anacrolix-log-dev. * Disable backends with dependencies not yet updated/available in Debian: - backend/dropbox: disabled because it requires golang-github-dropbox-dropbox-sdk-go-unofficial-dev (>= 6.4.0) with ContextClient support (Debian currently has 6.0.5). - backend/mega: disabled because it requires golang-github-t3rm1n4l-go-mega-dev updated to commit c6acd6a5bd04 or newer for LoginWithKeys and session export APIs. - backend/compress: disabled due to unpackaged zstd-seekable-format-go. - backend/archive, backend/filen, backend/internxt, backend/protondrive, cmd/archive, cmd/serve/nfs, cmd/serve/s3: disabled due to unpackaged dependencies. - dropbox and mega backends, drop unused log in dlna * debian/rules: expand DH_GOLANG_EXCLUDES to include all disabled backends. * d/changelog, d/watch, d/copyright: drop +dfsg suffix for 1.75.2-1 * d/rules, d/changelog: fix lintian warnings for nproc, changelog line length, and privacy breaches * debian/patches: amend FTP patch to drop cmd/all import, renumber and DEP-3 hygiene * d/control, d/changelog: replace obsolete yaml.v2 with yaml.v3, drop anacrolix-log * debian/patches: consolidate and fold backend/dlna patches via gbp pq * debian/control: upgrade debhelper-compat to 14 Checksums-Sha1: 5bff1129813963ea029e52d64217c615e29cdd85 5406 rclone_1.75.2-1.dsc 6771ed84a736fafe11afe988369263b809a15046 13684312 rclone_1.75.2.orig.tar.xz 758d8ed0b7964a2b6d99092ca8b3c07526acd722 30800 rclone_1.75.2-1.debian.tar.xz Checksums-Sha256: dd3f87c563986e70f020b7c32a8fe0ec217144308c857b76b770baa4ccbcf48d 5406 rclone_1.75.2-1.dsc 4686f58c8a530ab40be693fce81aaae8125a692012123a5a45981bad48d8a62d 13684312 rclone_1.75.2.orig.tar.xz 4e60798a2fefd557c6cd0284113b88b629c1f60b22e2aa623a338545aca00966 30800 rclone_1.75.2-1.debian.tar.xz Files: e78558580647a4acdfa73318574e3018 5406 net optional rclone_1.75.2-1.dsc 17560887fd4fb71ceae80fad70718c46 13684312 net optional rclone_1.75.2.orig.tar.xz fda7e2aad58858d1abdd2692158b4cdd 30800 net optional rclone_1.75.2-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEMN59F2OrlFLH4IJQSadpd5QoJssFAmrV7l8UHHNpcmV0YXJ0 QHRhdXdhcmUuZGUACgkQSadpd5QoJsuJzg/8CbHh5QY0dqNmJhS41ew16M5TrrPn +OHC+OusBJ4U9SACdCYD8FJNdOHrjvv6LITWUbb0a/RkPssKAj0NZQFXZS2lcbYV Uf5oIGs/oI5CLvwQKnUAn1MRzrIsnY+m+FfXdwlADhnJ2J7j28oBqR7MKfnXyOdS cqInUDUuCcvYxg7geVWOEr34qleonL9ZUzS4OWOWdAUUixZIUn7Gq9MEQC38sVZp D8RV/8HUgKX1XLQjbNlxYkYOYIqgeOEaHF6osRk2G7fRXSPA0eh/dzFhM8H6gisZ d5vWU255QgIQNhsr39LLUtHDOYQUWnzWh48UP6JcUP9Bs9sbgP7nTKoZrJ2TkC71 eQC4CqXzWGeBNmk6GQUmEMx6ia2mp+RrWvBlNgdKduoEwnHIV3t3fec6PdpQyD8h BSaBNHzrlMHsuK1jEueCwuOBJuPD0+VQPR3m/HLmUKwi7NVKqYEqcOJnvasL4CdD WOe7O9mtVYhMbqIVT9EcoGmoc9nXTlFGsRmZoGTZVDjD5uYhINPnN0xIWBgqbATi kltmSWnB9x5QBolW3/o6L+5uxlGZRuaE1WKAGlEpyaVRMjhfqmiGO0BOf/Ok2kXS 9fRaL8waAOzo78UcFY2hf0wrTM96V4Syzzjr/P3gWDL2TxpUO+/BOwgLl/Pf5avU 8cQrLV4RzqknTpE= =xfug -----END PGP SIGNATURE-----
