Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Fedora 40: FEDORA-2024-4d24786142 Critical: syncthing file sync issues

fedora
Calendar Grey November 6, 2024
Scroller Fedora
Debian Patch for syncthing 1.28.0 resolves vital security vulnerabilities. Update today for enhanced data synchronization trustworthiness.
Update to version 1.28.0

Summary

Syncthing replaces other file synchronization services with something

open, trustworthy and decentralized. Your data is your data alone and

you deserve to choose where it is stored, if it is shared with some

third party and how it's transmitted over the Internet. Using syncthing,

that control is returned to you.

This package contains the syncthing client binary and systemd services.

Update Information:

Update to version 1.28.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.28.0

Topics%20covered

Topics Covered

security advisory security issue critical Fedora update information file synchronization

Change Log

* Mon Oct 28 2024 Fabio Valentini - 1.28.0-1 - Update to version 1.28.0; Fixes RHBZ#2319211

References


[ 1 ] Bug #2292676 - CVE-2024-24789 syncthing: golang: archive/zip: Incorrect handling of certain ZIP files [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2292676 [ 2 ] Bug #2292720 - CVE-2024-24789 syncthing: golang: archive/zip: Incorrect handling of certain ZIP files [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2292720

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-4d24786142' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: syncthing
Product: Fedora 40
Version: 1.28.0
Release: 1.fc40
URL: https://syncthing.net
Summary: Continuous File Synchronization

Topics%20covered

Topics Covered

security advisory security issue critical Fedora update information file synchronization

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.