File _patchinfo of Package patchinfo
<patchinfo incident="6092">
<issue id="1016161" tracker="bnc">VUL-0: syncthing: two vulnerabilities fixed in 0.14.14</issue>
<category>security</category>
<rating>moderate</rating>
<packager>XRevan86</packager>
<description>This updates syncthing to version 0.14.16 and fixes the following issues:
The following security issue was fixed:
- A remote device that was already accepted by syncthing could perform
arbitrary reads and writes outside of the configured directories
(boo#1016161)
This update also contains a number of upstream improvements in the 0.14.14 version, including:
- improved performance
- UI improvements
- prevention of data inconsistencies
syncthing-gtk was updated to 0.9.2.3 to fix reading the configuration with non-ASCII locales.
The new version is compatible with syncthing 0.14.x and includes various improvement and fixes.
</description>
<summary>Security update for syncthing, syncthing-gtk</summary>
</patchinfo>