Packages / Fedora 44 / Source / Unspecified / syncthing

Source Package: syncthing (2.1.1-1.fc44)

Continuous File Synchronization

The following binary packages are built from this source package:

syncthing
Continuous File Synchronization
syncthing-tools
Continuous File Synchronization (server tools)

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE Severity Version impact

CVE	Severity	Version impact
[CVE-2026-77407] Published: Sep 16, 2026, 2:34:18 PM UTC RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go retain passwords as exported plaintext fields in Connection.Config.SASL after a successful PLAIN aut	High(7)	Unknown Details (8) `2.0.14-3.fc44` · aarch64 · 44 Unknown Version impact unknown nvd · syncthing · fedora · 44 `2.0.14-3.fc44` · x86_64 · 44 Unknown Version impact unknown nvd · syncthing · fedora · 44 `2.1.1-1.fc44` · aarch64 · 44 Unknown Version impact unknown nvd · syncthing · fedora · 44 `2.1.1-1.fc44` · x86_64 · 44 Unknown Version impact unknown nvd · syncthing · fedora · 44 `2.0.14-3.fc44` · aarch64 · 44 Unknown Version impact unknown nvd · syncthing · fedora · 44 `2.0.14-3.fc44` · x86_64 · 44 Unknown Version impact unknown nvd · syncthing · fedora · 44 `2.1.1-1.fc44` · aarch64 · 44 Unknown Version impact unknown nvd · syncthing · fedora · 44 `2.1.1-1.fc44` · x86_64 · 44 Unknown Version impact unknown nvd · syncthing · fedora · 44

[CVE-2026-77407]

Published: Sep 16, 2026, 2:34:18 PM UTC

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go retain passwords as exported plaintext fields in Connection.Config.SASL after a successful PLAIN aut

High(7)

Unknown

Details (8)

2.0.14-3.fc44 · aarch64 · 44
Unknown
Version impact unknown
nvd · syncthing · fedora · 44
2.0.14-3.fc44 · x86_64 · 44
Unknown
Version impact unknown
nvd · syncthing · fedora · 44
2.1.1-1.fc44 · aarch64 · 44
Unknown
Version impact unknown
nvd · syncthing · fedora · 44
2.1.1-1.fc44 · x86_64 · 44
Unknown
Version impact unknown
nvd · syncthing · fedora · 44
2.0.14-3.fc44 · aarch64 · 44
Unknown
Version impact unknown
nvd · syncthing · fedora · 44
2.0.14-3.fc44 · x86_64 · 44
Unknown
Version impact unknown
nvd · syncthing · fedora · 44
2.1.1-1.fc44 · aarch64 · 44
Unknown
Version impact unknown
nvd · syncthing · fedora · 44
2.1.1-1.fc44 · x86_64 · 44
Unknown
Version impact unknown
nvd · syncthing · fedora · 44

Last synced: Oct 28, 2026, 1:40:02 AM UTC

[CVE catalog]

Sources

Fedora 44 Everything aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-44&arch=aarch64
Signed-object SHA-256
236514c32119ab3c85b81fbb9e5e9d92b07aeba0d19d64c9b4fc9117a1863769
Keyring revision
RPM-GPG-KEY-fedora-44-primary
SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable
Fedora 44 Everything x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-44&arch=x86_64
Signed-object SHA-256
1300b99ac5d04b5561ad901320c8bd59ed1553f4971c3ce2ca48c40242c66676
Keyring revision
RPM-GPG-KEY-fedora-44-primary
SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable
Fedora 44 updates aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
44-updates-aarch64:6ecf7f9a3a707e537dd0c542e2f5fabb365c3c76c03b091b23e9c82d7f8ff88b
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=updates-released-f44&arch=aarch64
Signed-object SHA-256
2ec0ba92e556309075d8efe3c3301b36bb7ecd47c4e17566f0192c9c5436ed5f
Keyring revision
RPM-GPG-KEY-fedora-44-primary
SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable
Fedora 44 updates x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=updates-released-f44&arch=x86_64
Signed-object SHA-256
a69a0ab020457a7af2515066b7caccb3950bcf9dc7bedb52b1850098d9857ae1
Keyring revision
RPM-GPG-KEY-fedora-44-primary
SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable