--===============0334655890591832725==

-------------------------------------------------------------------------------
-
Fedora Update Notification
FEDORA-2026-a5b9928f10
2026-10-16 16:48:38.938362+00:00
-------------------------------------------------------------------------------
-

Name : syncthing
Product : Fedora 43
Version : 2.1.6
Release : 1.fc43
URL : https://github.com/syncthing/syncthing
Summary : Continuous File Synchronization
Description :
Syncthing replaces other file synchronization services with something
open, trustworthy and decentralized. Your data is your data alone and
you deserve to choose where it is stored, if it is shared with some
third party and how it's transmitted over the Internet. Using syncthing,
that control is returned to you.

This package contains the syncthing client binary and systemd services.

-------------------------------------------------------------------------------
-
Update Information:

Update to version 2.1.6.
Release notes:
https://github.com/syncthing/syncthing/releases/tag/v2.1.4
https://github.com/syncthing/syncthing/releases/tag/v2.1.5
https://github.com/syncthing/syncthing/releases/tag/v2.1.6
-------------------------------------------------------------------------------
-
ChangeLog:

* Tue Oct 6 2026 Fabio Valentini <decathorpe@gmail.com> - 2.1.6-1
- Update to version 2.1.6; Fixes RHBZ#2529696
* Tue Sep 1 2026 Gwyn Ciesla <gwync@protonmail.com> - 2.1.3-1
- 2.1.3
* Fri Jul 17 2026 Fedora Release Engineering <releng@fedoraproject.org> -
2.1.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Fri Jun 19 2026 Fabio Valentini <decathorpe@gmail.com> - 2.1.1-1
- Update to version 2.1.1; Fixes RHBZ#2444191
* Tue Feb 17 2026 Maxwell G <maxwell@gtmx.me> - 2.0.14-3
- Require syncthing and syncthing-tools packages to be updated together
* Sun Feb 8 2026 Maxwell G <maxwell@gtmx.me> - 2.0.14-2
- Update quic-go to newer version that supports Go 1.26
* Sun Feb 8 2026 Maxwell G <maxwell@gtmx.me> - 2.0.14-1
- Update to 2.0.14.
* Sun Feb 8 2026 Fabio Valentini <decathorpe@gmail.com> - 2.0.11-1
- Update to version 2.0.11
* Tue Feb 3 2026 Maxwell G <maxwell@gtmx.me> - 1.30.0-4
- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26
* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> -
1.30.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Oct 10 2025 Alejandro Sáez <asm@redhat.com> - 1.30.0-2
- rebuild
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #2408355 - CVE-2025-58189 syncthing: go crypto/tls ALPN negotiation
error contains attacker controlled information [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2408355
[ 2 ] Bug #2409827 - CVE-2025-61723 syncthing: Quadratic complexity when
parsing some invalid inputs in encoding/pem [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2409827
[ 3 ] Bug #2410777 - CVE-2025-58185 syncthing: Parsing DER payload can cause
memory exhaustion in encoding/asn1 [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2410777
[ 4 ] Bug #2411673 - CVE-2025-58188 syncthing: Panic when validating
certificates with DSA public keys in crypto/x509 [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2411673
[ 5 ] Bug #2412606 - CVE-2025-58183 syncthing: Unbounded allocation when
parsing GNU sparse map [fedora-43]
https://bugzilla.redhat.com/show_bug.cgi?id=2412606
[ 6 ] Bug #2535979 - CVE-2026-77407 syncthing: RabbitMQ amqp091-go: Plaintext
Credential Exposure via Exported PLAIN Authentication Fields [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2535979
-------------------------------------------------------------------------------
-

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-a5b9928f10' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-

--===============0334655890591832725==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

--
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
--===============0334655890591832725==--