openSUSE Security Update : syncthing / syncthing-gtk (openSUSE-2017-29)
Medium Nessus Plugin ID 96374
SynopsisThe remote openSUSE host is missing a security update.
DescriptionThis updates syncthing to version 0.14.16 and fixes the following issues :
The following security issue was fixed :
- A remote device that was already accepted by syncthing could perform arbitrary reads and writes outside of the configured directories (boo#1016161) This update also contains a number of upstream improvements in the 0.14.14 version, including :
- improved performance
- UI improvements
- prevention of data inconsistencies syncthing-gtk was updated to 0.9.2.3 to fix reading the configuration with non-ASCII locales. The new version is compatible with syncthing 0.14.x and includes various improvement and fixes.
SolutionUpdate the affected syncthing / syncthing-gtk packages.