Security update for syncthing, syncthing-gtk SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2017:0045-1 Final 1 1 2017-01-07T20:00:19Z current 2017-01-07T20:00:19Z 2017-01-07T20:00:19Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for syncthing, syncthing-gtk This updates syncthing to version 0.14.16 and fixes the following issues: The following security issue was fixed: - A remote device that was already accepted by syncthing could perform arbitrary reads and writes outside of the configured directories (boo#1016161) This update also contains a number of upstream improvements in the 0.14.14 version, including: - improved performance - UI improvements - prevention of data inconsistencies syncthing-gtk was updated to 0.9.2.3 to fix reading the configuration with non-ASCII locales. The new version is compatible with syncthing 0.14.x and includes various improvement and fixes. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-updates/2017-01/msg00018.html E-Mail link for openSUSE-SU-2017:0045-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.2 syncthing-0.14.16-5.1 syncthing-gtk-0.9.2.3-3.1 syncthing-gtk-lang-0.9.2.3-3.1 syncthing-0.14.16-5.1 as a component of openSUSE Leap 42.2 syncthing-gtk-0.9.2.3-3.1 as a component of openSUSE Leap 42.2 syncthing-gtk-lang-0.9.2.3-3.1 as a component of openSUSE Leap 42.2