Packages / Fedora 43 / Unspecified / syncthing

Package: syncthing (1.30.0-1.fc43)

Continuous File Synchronization

Syncthing replaces other file synchronization services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it's transmitted over the Internet. Using syncthing, that control is returned to you. This package contains the syncthing client binary and systemd services.

Other Packages Related to syncthing:

dep: /bin/sh
Package not available
dep: /bin/sh
Package not available
dep: [hicolor-icon-theme]
Basic requirement for icon themes
dep: libresolv.so.2()(64bit)
Package not available
dep: rtld(GNU_HASH)
Package not available
dep: libc.so.6(GLIBC_2.34)(64bit)
Package not available

Download syncthing

Architecture	Package size	Installed size	Files	Package
aarch64	8.2 MiB	22 MiB	list of files	Download
x86_64	8.9 MiB	24 MiB	list of files	Download

Package file paths (35)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/bin/syncthing
/usr/lib/.build-id
/usr/lib/.build-id/70
/usr/lib/.build-id/70/4e458c632e576daa0f534b6c9985dd9629d374
/usr/lib/.build-id/f0
/usr/lib/.build-id/f0/561d9d722dee492a0e40d9d3e03317420334a2
/usr/lib/systemd/system/syncthing@.service
/usr/lib/systemd/user/syncthing.service
/usr/share/applications/syncthing-start.desktop
/usr/share/applications/syncthing-ui.desktop
/usr/share/doc/syncthing
/usr/share/doc/syncthing/AUTHORS
/usr/share/doc/syncthing/README.md
/usr/share/icons/hicolor/128x128/apps/syncthing.png
/usr/share/icons/hicolor/256x256/apps/syncthing.png
/usr/share/icons/hicolor/32x32/apps/syncthing.png
/usr/share/icons/hicolor/512x512/apps/syncthing.png
/usr/share/icons/hicolor/64x64/apps/syncthing.png
/usr/share/icons/hicolor/scalable/apps/syncthing.svg
/usr/share/licenses/syncthing
/usr/share/licenses/syncthing/LICENSE
/usr/share/man/man1/syncthing.1.gz
/usr/share/man/man5/syncthing-config.5.gz
/usr/share/man/man5/syncthing-stignore.5.gz
/usr/share/man/man7/syncthing-bep.7.gz
/usr/share/man/man7/syncthing-device-ids.7.gz
/usr/share/man/man7/syncthing-event-api.7.gz
/usr/share/man/man7/syncthing-faq.7.gz
/usr/share/man/man7/syncthing-globaldisco.7.gz
/usr/share/man/man7/syncthing-localdisco.7.gz
/usr/share/man/man7/syncthing-networking.7.gz
/usr/share/man/man7/syncthing-relay.7.gz
/usr/share/man/man7/syncthing-rest-api.7.gz
/usr/share/man/man7/syncthing-security.7.gz
/usr/share/man/man7/syncthing-versioning.7.gz

Field source: Fedora 43 Everything aarch64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Fedora 43 in the browser Build an image that includes syncthing

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
1.30.0-1.fc43	43 / everything	aarch64	Fedora 43 · Everything · aarch64	8.2 MiB	22 MiB	Packages/s/syncthing-1.30.0-1.fc43.aarch64.rpm
1.30.0-1.fc43	43 / everything	x86_64	Fedora 43 · Everything · x86_64	8.9 MiB	24 MiB	Packages/s/syncthing-1.30.0-1.fc43.x86_64.rpm

Field source: Fedora 43 Everything aarch64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE	Severity	Version impact
[CVE-2026-77407] Published: Sep 16, 2026, 2:34:18 PM UTC RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go retain passwords as exported plaintext fields in Connection.Config.SASL after a successful PLAIN aut	High(7)	Unknown Details (2) `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown nvd · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown nvd · syncthing · fedora · 43
[CVE-2025-58183] Published: Oct 7, 2025, 10:00:00 PM UTC golang-1.19: CVE-2025-58183	High(7.5)	Unknown Details (2) `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43
[CVE-2025-58185] Published: Oct 7, 2025, 10:00:00 PM UTC golang-1.19: CVE-2025-58185	Medium(5.3)	Unknown Details (2) `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43
[CVE-2025-58188] Published: Oct 7, 2025, 10:00:00 PM UTC golang-1.19: CVE-2025-58188	High(7.5)	Unknown Details (2) `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43
[CVE-2025-58189] Published: Oct 7, 2025, 10:00:00 PM UTC golang-1.19: CVE-2025-58189	Medium(5.3)	Unknown Details (2) `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43
[CVE-2025-61723] Published: Oct 7, 2025, 10:00:00 PM UTC golang-1.19: CVE-2025-61723	High(7.5)	Unknown Details (2) `1.30.0-1.fc43` · aarch64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43 `1.30.0-1.fc43` · x86_64 · 43 Unknown Version impact unknown dsa · syncthing · fedora · 43

Last synced: Oct 28, 2026, 3:13:24 AM UTC

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1.30.0-1.fc43 / aarch64Observed Sep 1, 2026sha256 a72c7f916ed0…ffbcb64aSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): a72c7f916ed0d23f4497a635d0b3ddb11be1798109447047147546c6ffbcb64a

Verify download

printf '%s  %s\n' 'a72c7f916ed0d23f4497a635d0b3ddb11be1798109447047147546c6ffbcb64a' 'syncthing-1.30.0-1.fc43.aarch64.rpm' | sha256sum --check --strict -

Field source: Fedora 43 Everything aarch64

1.30.0-1.fc43 / x86_64Observed Sep 1, 2026sha256 ab92c33e6c72…f27902a5Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): ab92c33e6c728a5e09a5eb9d6438df6fdc5ca911beff9f499fcac5def27902a5

Verify download

printf '%s  %s\n' 'ab92c33e6c728a5e09a5eb9d6438df6fdc5ca911beff9f499fcac5def27902a5' 'syncthing-1.30.0-1.fc43.x86_64.rpm' | sha256sum --check --strict -

Field source: Fedora 43 Everything x86_64

Sources

Fedora 43 Everything aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-43&arch=aarch64
Signed-object SHA-256
6c2a7b7225a6bd12acd5c95dcd0350a0a5929e195692ff68eb31db0ee6b9897b
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable
Fedora 43 Everything x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-43&arch=x86_64
Signed-object SHA-256
42c0002750de6066124693fff143f4854c1e29474d893f7e6a7616012d41338f
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable