mirror of
https://github.com/rclone/rclone
synced 2024-12-22 13:03:02 +01:00
a176d4cbda
This commit resolves CVE-2024-45337 which is an a potential auth bypass for `rclone serve sftp`. https://nvd.nist.gov/vuln/detail/CVE-2024-45337 However after review of the code, rclone is **not** affected as it handles the authentication correctly. Rclone already uses the Extensions field of the Permissions return value from the various authentication callbacks to record data associated with the authentication attempt as suggested in the vulnerability report. This commit includes the recommended update to golang.org/x/crypto anyway so that this is visible in the changelog. Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.29.0 to 0.31.0. - [Commits](https://github.com/golang/crypto/compare/v0.29.0...v0.31.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
232 lines
11 KiB
Modula-2
232 lines
11 KiB
Modula-2
module github.com/rclone/rclone
|
|
|
|
go 1.21
|
|
|
|
require (
|
|
bazil.org/fuse v0.0.0-20230120002735-62a210ff1fd5
|
|
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.16.0
|
|
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.8.0
|
|
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.4.1
|
|
github.com/Azure/azure-sdk-for-go/sdk/storage/azfile v1.3.1
|
|
github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358
|
|
github.com/Files-com/files-sdk-go/v3 v3.2.78
|
|
github.com/Max-Sum/base32768 v0.0.0-20230304063302-18e6ce5945fd
|
|
github.com/a8m/tree v0.0.0-20240104212747-2c8764a5f17e
|
|
github.com/aalpar/deheap v0.0.0-20210914013432-0cc84d79dec3
|
|
github.com/abbot/go-http-auth v0.4.0
|
|
github.com/anacrolix/dms v1.7.1
|
|
github.com/anacrolix/log v0.16.0
|
|
github.com/atotto/clipboard v0.1.4
|
|
github.com/aws/aws-sdk-go-v2 v1.32.4
|
|
github.com/aws/aws-sdk-go-v2/config v1.28.3
|
|
github.com/aws/aws-sdk-go-v2/credentials v1.17.44
|
|
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.37
|
|
github.com/aws/aws-sdk-go-v2/service/s3 v1.66.3
|
|
github.com/aws/smithy-go v1.22.0
|
|
github.com/buengese/sgzip v0.1.1
|
|
github.com/cloudsoda/go-smb2 v0.0.0-20231124195312-f3ec8ae2c891
|
|
github.com/colinmarc/hdfs/v2 v2.4.0
|
|
github.com/coreos/go-semver v0.3.1
|
|
github.com/coreos/go-systemd/v22 v22.5.0
|
|
github.com/dop251/scsu v0.0.0-20220106150536-84ac88021d00
|
|
github.com/dropbox/dropbox-sdk-go-unofficial/v6 v6.0.5
|
|
github.com/gabriel-vasile/mimetype v1.4.6
|
|
github.com/gdamore/tcell/v2 v2.7.4
|
|
github.com/go-chi/chi/v5 v5.1.0
|
|
github.com/go-darwin/apfs v0.0.0-20211011131704-f84b94dbf348
|
|
github.com/go-git/go-billy/v5 v5.6.0
|
|
github.com/google/uuid v1.6.0
|
|
github.com/hanwen/go-fuse/v2 v2.6.3
|
|
github.com/henrybear327/Proton-API-Bridge v1.0.0
|
|
github.com/henrybear327/go-proton-api v1.0.0
|
|
github.com/jcmturner/gokrb5/v8 v8.4.4
|
|
github.com/jlaffaye/ftp v0.2.0
|
|
github.com/josephspurrier/goversioninfo v1.4.1
|
|
github.com/jzelinskie/whirlpool v0.0.0-20201016144138-0675e54bb004
|
|
github.com/klauspost/compress v1.17.11
|
|
github.com/koofr/go-httpclient v0.0.0-20240520111329-e20f8f203988
|
|
github.com/koofr/go-koofrclient v0.0.0-20221207135200-cbd7fc9ad6a6
|
|
github.com/mattn/go-colorable v0.1.13
|
|
github.com/mattn/go-runewidth v0.0.16
|
|
github.com/minio/minio-go/v7 v7.0.74
|
|
github.com/mitchellh/go-homedir v1.1.0
|
|
github.com/moby/sys/mountinfo v0.7.2
|
|
github.com/ncw/swift/v2 v2.0.3
|
|
github.com/oracle/oci-go-sdk/v65 v65.78.0
|
|
github.com/patrickmn/go-cache v2.1.0+incompatible
|
|
github.com/pkg/sftp v1.13.7
|
|
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
|
|
github.com/prometheus/client_golang v1.20.5
|
|
github.com/putdotio/go-putio/putio v0.0.0-20200123120452-16d982cac2b8
|
|
github.com/quasilyte/go-ruleguard/dsl v0.3.22
|
|
github.com/rclone/gofakes3 v0.0.3
|
|
github.com/rfjakob/eme v1.1.2
|
|
github.com/rivo/uniseg v0.4.7
|
|
github.com/rogpeppe/go-internal v1.12.0
|
|
github.com/shirou/gopsutil/v3 v3.24.5
|
|
github.com/sirupsen/logrus v1.9.3
|
|
github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966
|
|
github.com/spf13/cobra v1.8.1
|
|
github.com/spf13/pflag v1.0.5
|
|
github.com/stretchr/testify v1.9.0
|
|
github.com/t3rm1n4l/go-mega v0.0.0-20240219080617-d494b6a8ace7
|
|
github.com/unknwon/goconfig v1.0.0
|
|
github.com/willscott/go-nfs v0.0.3-0.20240425122109-91bc38957cc9
|
|
github.com/winfsp/cgofuse v1.5.1-0.20221118130120-84c0898ad2e0
|
|
github.com/xanzy/ssh-agent v0.3.3
|
|
github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78
|
|
github.com/yunify/qingstor-sdk-go/v3 v3.2.0
|
|
go.etcd.io/bbolt v1.3.10
|
|
goftp.io/server/v2 v2.0.1
|
|
golang.org/x/crypto v0.31.0
|
|
golang.org/x/net v0.31.0
|
|
golang.org/x/oauth2 v0.24.0
|
|
golang.org/x/sync v0.10.0
|
|
golang.org/x/sys v0.28.0
|
|
golang.org/x/text v0.21.0
|
|
golang.org/x/time v0.8.0
|
|
google.golang.org/api v0.205.0
|
|
gopkg.in/validator.v2 v2.0.1
|
|
gopkg.in/yaml.v2 v2.4.0
|
|
storj.io/uplink v1.13.1
|
|
)
|
|
|
|
require (
|
|
cloud.google.com/go/auth v0.10.1 // indirect
|
|
cloud.google.com/go/auth/oauth2adapt v0.2.5 // indirect
|
|
cloud.google.com/go/compute/metadata v0.5.2 // indirect
|
|
github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0 // indirect
|
|
github.com/AzureAD/microsoft-authentication-library-for-go v1.2.2 // indirect
|
|
github.com/ProtonMail/bcrypt v0.0.0-20211005172633-e235017c1baf // indirect
|
|
github.com/ProtonMail/gluon v0.17.1-0.20230724134000-308be39be96e // indirect
|
|
github.com/ProtonMail/go-mime v0.0.0-20230322103455-7d82a3887f2f // indirect
|
|
github.com/ProtonMail/go-srp v0.0.7 // indirect
|
|
github.com/ProtonMail/gopenpgp/v2 v2.7.4 // indirect
|
|
github.com/PuerkitoBio/goquery v1.8.1 // indirect
|
|
github.com/akavel/rsrc v0.10.2 // indirect
|
|
github.com/anacrolix/generics v0.0.1 // indirect
|
|
github.com/andybalholm/cascadia v1.3.2 // indirect
|
|
github.com/appscode/go-querystring v0.0.0-20170504095604-0126cfb3f1dc // indirect
|
|
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.6 // indirect
|
|
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.19 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.23 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.23 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.23 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.0 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.4.4 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.4 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.4 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/sso v1.24.5 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.28.4 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/sts v1.32.4 // indirect
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
|
github.com/bradenaw/juniper v0.15.2 // indirect
|
|
github.com/bradfitz/iter v0.0.0-20191230175014-e8f45d346db8 // indirect
|
|
github.com/calebcase/tmpfile v1.0.3 // indirect
|
|
github.com/cespare/xxhash/v2 v2.3.0 // indirect
|
|
github.com/chilts/sid v0.0.0-20190607042430-660e94789ec9 // indirect
|
|
github.com/cloudflare/circl v1.3.7 // indirect
|
|
github.com/cpuguy83/go-md2man/v2 v2.0.4 // indirect
|
|
github.com/cronokirby/saferith v0.33.0 // indirect
|
|
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
|
|
github.com/dustin/go-humanize v1.0.1 // indirect
|
|
github.com/emersion/go-message v0.18.0 // indirect
|
|
github.com/emersion/go-textwrapper v0.0.0-20200911093747-65d896831594 // indirect
|
|
github.com/emersion/go-vcard v0.0.0-20230815062825-8fda7d206ec9 // indirect
|
|
github.com/felixge/httpsnoop v1.0.4 // indirect
|
|
github.com/flynn/noise v1.0.1 // indirect
|
|
github.com/gdamore/encoding v1.0.0 // indirect
|
|
github.com/geoffgarside/ber v1.1.0 // indirect
|
|
github.com/go-ini/ini v1.67.0 // indirect
|
|
github.com/go-logr/logr v1.4.2 // indirect
|
|
github.com/go-logr/stdr v1.2.2 // indirect
|
|
github.com/go-ole/go-ole v1.3.0 // indirect
|
|
github.com/go-resty/resty/v2 v2.11.0 // indirect
|
|
github.com/goccy/go-json v0.10.3 // indirect
|
|
github.com/gofrs/flock v0.8.1 // indirect
|
|
github.com/gogo/protobuf v1.3.2 // indirect
|
|
github.com/golang-jwt/jwt/v5 v5.2.1 // indirect
|
|
github.com/google/s2a-go v0.1.8 // indirect
|
|
github.com/googleapis/enterprise-certificate-proxy v0.3.4 // indirect
|
|
github.com/googleapis/gax-go/v2 v2.13.0 // indirect
|
|
github.com/gopherjs/gopherjs v0.0.0-20181103185306-d547d1d9531e // indirect
|
|
github.com/hashicorp/errwrap v1.1.0 // indirect
|
|
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
|
|
github.com/hashicorp/go-multierror v1.1.1 // indirect
|
|
github.com/hashicorp/go-retryablehttp v0.7.7 // indirect
|
|
github.com/hashicorp/go-uuid v1.0.3 // indirect
|
|
github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
|
github.com/jcmturner/aescts/v2 v2.0.0 // indirect
|
|
github.com/jcmturner/dnsutils/v2 v2.0.0 // indirect
|
|
github.com/jcmturner/gofork v1.7.6 // indirect
|
|
github.com/jcmturner/goidentity/v6 v6.0.1 // indirect
|
|
github.com/jcmturner/rpc/v2 v2.0.3 // indirect
|
|
github.com/jtolio/noiseconn v0.0.0-20231127013910-f6d9ecbf1de7 // indirect
|
|
github.com/klauspost/cpuid/v2 v2.2.8 // indirect
|
|
github.com/kr/fs v0.1.0 // indirect
|
|
github.com/kylelemons/godebug v1.1.0 // indirect
|
|
github.com/lpar/date v1.0.0 // indirect
|
|
github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
|
|
github.com/lufia/plan9stats v0.0.0-20231016141302-07b5767bb0ed // indirect
|
|
github.com/mattn/go-isatty v0.0.20 // indirect
|
|
github.com/minio/md5-simd v1.1.2 // indirect
|
|
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
|
|
github.com/onsi/ginkgo v1.16.5 // indirect
|
|
github.com/panjf2000/ants/v2 v2.9.1 // indirect
|
|
github.com/pengsrc/go-shared v0.2.1-0.20190131101655-1999055a4a14 // indirect
|
|
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
|
|
github.com/pkg/errors v0.9.1 // indirect
|
|
github.com/power-devops/perfstat v0.0.0-20221212215047-62379fc7944b // indirect
|
|
github.com/prometheus/client_model v0.6.1 // indirect
|
|
github.com/prometheus/common v0.55.0 // indirect
|
|
github.com/prometheus/procfs v0.15.1 // indirect
|
|
github.com/rasky/go-xdr v0.0.0-20170124162913-1a41d1a06c93 // indirect
|
|
github.com/relvacode/iso8601 v1.3.0 // indirect
|
|
github.com/rs/xid v1.5.0 // indirect
|
|
github.com/russross/blackfriday/v2 v2.1.0 // indirect
|
|
github.com/ryszard/goskiplist v0.0.0-20150312221310-2dfbae5fcf46 // indirect
|
|
github.com/sabhiram/go-gitignore v0.0.0-20210923224102-525f6e181f06 // indirect
|
|
github.com/samber/lo v1.47.0 // indirect
|
|
github.com/shabbyrobe/gocovmerge v0.0.0-20230507112040-c3350d9342df // indirect
|
|
github.com/shoenig/go-m1cpu v0.1.6 // indirect
|
|
github.com/sony/gobreaker v0.5.0 // indirect
|
|
github.com/spacemonkeygo/monkit/v3 v3.0.22 // indirect
|
|
github.com/tklauser/go-sysconf v0.3.13 // indirect
|
|
github.com/tklauser/numcpus v0.7.0 // indirect
|
|
github.com/willscott/go-nfs-client v0.0.0-20240104095149-b44639837b00 // indirect
|
|
github.com/yusufpapurcu/wmi v1.2.4 // indirect
|
|
github.com/zeebo/blake3 v0.2.3 // indirect
|
|
github.com/zeebo/errs v1.3.0 // indirect
|
|
go.opencensus.io v0.24.0 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.54.0 // indirect
|
|
go.opentelemetry.io/otel v1.29.0 // indirect
|
|
go.opentelemetry.io/otel/metric v1.29.0 // indirect
|
|
go.opentelemetry.io/otel/trace v1.29.0 // indirect
|
|
golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
|
|
golang.org/x/mod v0.19.0 // indirect
|
|
golang.org/x/tools v0.23.0 // indirect
|
|
google.golang.org/genproto/googleapis/api v0.0.0-20241015192408-796eee8c2d53 // indirect
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20241021214115-324edc3d5d38 // indirect
|
|
google.golang.org/grpc v1.67.1 // indirect
|
|
google.golang.org/protobuf v1.35.1 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
moul.io/http2curl/v2 v2.3.0 // indirect
|
|
storj.io/common v0.0.0-20240812101423-26b53789c348 // indirect
|
|
storj.io/drpc v0.0.35-0.20240709171858-0075ac871661 // indirect
|
|
storj.io/eventkit v0.0.0-20240415002644-1d9596fee086 // indirect
|
|
storj.io/infectious v0.0.2 // indirect
|
|
storj.io/picobuf v0.0.3 // indirect
|
|
)
|
|
|
|
require (
|
|
github.com/Microsoft/go-winio v0.6.1 // indirect
|
|
github.com/ProtonMail/go-crypto v1.1.2
|
|
github.com/golang-jwt/jwt/v4 v4.5.1
|
|
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
|
|
github.com/pkg/xattr v0.4.10
|
|
golang.org/x/mobile v0.0.0-20240716161057-1ad2df20a8b6
|
|
golang.org/x/term v0.27.0
|
|
)
|