From c1f5df209024c79028c98134b703b31d599befac Mon Sep 17 00:00:00 2001 From: Nick Craig-Wood Date: Wed, 8 Apr 2026 16:43:41 +0100 Subject: [PATCH] Changelog updates from Version v1.73.4 --- docs/content/changelog.md | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/docs/content/changelog.md b/docs/content/changelog.md index a2abc6cf7..9ea51f431 100644 --- a/docs/content/changelog.md +++ b/docs/content/changelog.md @@ -6,6 +6,33 @@ description: "Rclone Changelog" # Changelog +## v1.73.4 - 2026-04-08 + +[See commits](https://github.com/rclone/rclone/compare/v1.73.3...v1.73.4) + +- Bug Fixes + - build + - Update to go 1.25.9 to fix multiple CVEs (Nick Craig-Wood) + - CVE-2026-32282: os: Root.Chmod can follow symlinks out of the root on Linux + - CVE-2026-32289: html/template: JS template literal context incorrectly tracked + - CVE-2026-33810: crypto/x509: excluded DNS constraints not properly applied to wildcard domains + - CVE-2026-27144: cmd/compile: no-op interface conversion bypasses overlap checking + - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination + - CVE-2026-32288: archive/tar: unbounded allocation when parsing old format GNU sparse map + - CVE-2026-32283: crypto/tls: multiple key update handshake messages can cause connection to deadlock + - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG + - CVE-2026-32280: crypto/x509: unexpected work during chain building + - CVE-2026-32281: crypto/x509: inefficient policy validation + - Fix Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder (dependabot[bot]) + - Update golang.org/x/image to 0.38.0 to fix CVE-2026-33809 (dependabot[bot]) + - docs + - Fix header level for metadata option (Clément Notin) + - Fix markdown issues in mount docs (albertony) + - Fix link to not be language specific (Ross Smith II) + - Note macOS 10.15 (Catalina) support with version v1.70.3 (kapitainsky) +- Filen + - Update SDK version (Enduriel) + ## v1.73.3 - 2026-03-23 [See commits](https://github.com/rclone/rclone/compare/v1.73.2...v1.73.3)