Packages / Fedora 43 / Source / Unspecified / syncthing

Source Package: syncthing (1.30.0-1.fc43)

Continuous File Synchronization

The following binary packages are built from this source package:

syncthing
Continuous File Synchronization
syncthing-tools
Continuous File Synchronization (server tools)

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE	Severity	Version impact
[CVE-2026-77407] Published: Sep 16, 2026, 2:34:18 PM UTC RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go retain passwords as exported plaintext fields in Connection.Config.SASL after a successful PLAIN aut	High(7)	Unknown Details (4) `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown nvd · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown nvd · syncthing · fedora · 43 `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown nvd · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown nvd · syncthing · fedora · 43
[CVE-2025-58183] Published: Oct 7, 2025, 10:00:00 PM UTC golang-1.19: CVE-2025-58183	High(7.5)	Unknown Details (4) `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43
[CVE-2025-58185] Published: Oct 7, 2025, 10:00:00 PM UTC golang-1.19: CVE-2025-58185	Medium(5.3)	Unknown Details (4) `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43
[CVE-2025-58188] Published: Oct 7, 2025, 10:00:00 PM UTC golang-1.19: CVE-2025-58188	High(7.5)	Unknown Details (4) `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43
[CVE-2025-58189] Published: Oct 7, 2025, 10:00:00 PM UTC golang-1.19: CVE-2025-58189	Medium(5.3)	Unknown Details (4) `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43
[CVE-2025-61723] Published: Oct 7, 2025, 10:00:00 PM UTC golang-1.19: CVE-2025-61723	High(7.5)	Unknown Details (4) `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43

Last synced: Oct 28, 2026, 1:36:38 AM UTC

[CVE catalog]

Sources

Fedora 43 Everything aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-43&arch=aarch64
Signed-object SHA-256
6c2a7b7225a6bd12acd5c95dcd0350a0a5929e195692ff68eb31db0ee6b9897b
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable
Fedora 43 Everything x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-43&arch=x86_64
Signed-object SHA-256
42c0002750de6066124693fff143f4854c1e29474d893f7e6a7616012d41338f
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable