1. Home
  2. Security Advisories
  3. Fedora
  4. FEDORA-2023-0d46257314

[FEDORA-2023-0d46257314] Fedora 39: syncthing

Severity High
Affected Packages 1
CVEs 1
Info Packages References Vulnerabilities

Update to version 1.26.0. Release notes:
https://github.com/syncthing/syncthing/releases/tag/v1.26.0

Package Affected Version
pkg:rpm/fedora/syncthing?distro=fedora-39 < 1.26.0.1.fc39
ID
FEDORA-2023-0d46257314
Severity
high
Severity from
CVE-2023-39325
URL
https://bodhi.fedoraproject.org/updates/FEDORA-2023-0d46257314
Published
2023-11-18T01:39:12
(10 months ago)
Modified
2023-11-18T01:39:12
(10 months ago)
Rights
Copyright 2023 Red Hat, Inc.
Other Advisories
Source # ID Name URL
Bugzilla 2248412 Bug #2248412 - syncthing: golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-39325) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2248412
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/fedora/syncthing?distro=fedora-39 fedora syncthing < 1.26.0.1.fc39 fedora-39
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date