opensuse-su-2023:0126-1
Vulnerability from csaf_opensuse
Published
2023-06-12 14:01
Modified
2023-06-12 14:01
Summary
Security update for syncthing
Notes
Title of the patch
Security update for syncthing
Description of the patch
This update for syncthing fixes the following issues:
- Update to 1.13.5
* This release fixes CVE-2022-46165 “Cross-site Scripting (XSS) in Web GUI”
* Bugfixes:
#8503: 'syncthing cli config devices add' reflect error when using --addresses flag
#8764: Ignore patterns creating during folder addition are not loaded
#8778: Tests fail on Windows with Go 1.20
#8779: Test cleanup fails all model tests on Windows on Go 1.20
#8859: Incorrect handling of path for auto accepted folder
* Other issues:
#8799: 'fatal error: checkptr: converted pointer straddles multiple allocations' in crypto tests
- Update to 1.23.4
- Bugfixes:
#8851: 'Running global migration to fix encryption file sizes' on every start
- Update to 1.23.3
* Bugfixes:
#5408: Selection of time in versions GUI not possible without editing the string inside the textfield
#8277: Mutual encrypted sharing doesn't work (both sides with password)
#8556: Increased file size when sharing between encrypted devices
#8599: Key generation at connect time is slow for encrypted connections
* Enhancements:
#7859: Allow sub-second watcher delay (use case: remote development)
* Other issues:
#8828: cmd/stdiscosrv: TestDatabaseGetSet flake
- Adding a desktop file for the Web UI
- Update to 1.23.2
* Bugfixes:
#8749: Relay listener does not restart sometimes
* Enhancements:
#8660: GUI editor for xattr filter patterns
#8781: gui: Remove duplicate Spanish translation
* Other issues:
#8768: Update quic-go for Go 1.20
Patchnames
openSUSE-2023-126
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for syncthing",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for syncthing fixes the following issues:\n\n- Update to 1.13.5\n\n * This release fixes CVE-2022-46165 \u201cCross-site Scripting (XSS) in Web GUI\u201d\n\n * Bugfixes:\n\n #8503: \u0027syncthing cli config devices add\u0027 reflect error when using --addresses flag\n #8764: Ignore patterns creating during folder addition are not loaded\n #8778: Tests fail on Windows with Go 1.20\n #8779: Test cleanup fails all model tests on Windows on Go 1.20\n #8859: Incorrect handling of path for auto accepted folder\n\n * Other issues:\n\n #8799: \u0027fatal error: checkptr: converted pointer straddles multiple allocations\u0027 in crypto tests\n\n- Update to 1.23.4\n\n - Bugfixes:\n\n #8851: \u0027Running global migration to fix encryption file sizes\u0027 on every start\n\n- Update to 1.23.3\n\n * Bugfixes:\n\n #5408: Selection of time in versions GUI not possible without editing the string inside the textfield\n #8277: Mutual encrypted sharing doesn\u0027t work (both sides with password)\n #8556: Increased file size when sharing between encrypted devices\n #8599: Key generation at connect time is slow for encrypted connections\n\n * Enhancements:\n\n #7859: Allow sub-second watcher delay (use case: remote development)\n\n * Other issues:\n\n #8828: cmd/stdiscosrv: TestDatabaseGetSet flake\n\n- Adding a desktop file for the Web UI\n\n- Update to 1.23.2\n\n * Bugfixes:\n\n #8749: Relay listener does not restart sometimes\n\n * Enhancements:\n\n #8660: GUI editor for xattr filter patterns\n #8781: gui: Remove duplicate Spanish translation\n\n * Other issues:\n\n #8768: Update quic-go for Go 1.20\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2023-126",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2023_0126-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2023:0126-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FSIGQKHWF6QOVLGHNMHBJX6N46RVSK5D/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2023:0126-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FSIGQKHWF6QOVLGHNMHBJX6N46RVSK5D/"
},
{
"category": "self",
"summary": "SUSE Bug 1212085",
"url": "https://bugzilla.suse.com/1212085"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-46165 page",
"url": "https://www.suse.com/security/cve/CVE-2022-46165/"
}
],
"title": "Security update for syncthing",
"tracking": {
"current_release_date": "2023-06-12T14:01:56Z",
"generator": {
"date": "2023-06-12T14:01:56Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2023:0126-1",
"initial_release_date": "2023-06-12T14:01:56Z",
"revision_history": [
{
"date": "2023-06-12T14:01:56Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "syncthing-1.23.5-bp155.2.3.1.aarch64",
"product": {
"name": "syncthing-1.23.5-bp155.2.3.1.aarch64",
"product_id": "syncthing-1.23.5-bp155.2.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64",
"product": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64",
"product_id": "syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "syncthing-1.23.5-bp155.2.3.1.i586",
"product": {
"name": "syncthing-1.23.5-bp155.2.3.1.i586",
"product_id": "syncthing-1.23.5-bp155.2.3.1.i586"
}
},
{
"category": "product_version",
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.i586",
"product": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.i586",
"product_id": "syncthing-relaysrv-1.23.5-bp155.2.3.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "syncthing-1.23.5-bp155.2.3.1.ppc64le",
"product": {
"name": "syncthing-1.23.5-bp155.2.3.1.ppc64le",
"product_id": "syncthing-1.23.5-bp155.2.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le",
"product": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le",
"product_id": "syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "syncthing-1.23.5-bp155.2.3.1.s390x",
"product": {
"name": "syncthing-1.23.5-bp155.2.3.1.s390x",
"product_id": "syncthing-1.23.5-bp155.2.3.1.s390x"
}
},
{
"category": "product_version",
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x",
"product": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x",
"product_id": "syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "syncthing-1.23.5-bp155.2.3.1.x86_64",
"product": {
"name": "syncthing-1.23.5-bp155.2.3.1.x86_64",
"product_id": "syncthing-1.23.5-bp155.2.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64",
"product": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64",
"product_id": "syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Package Hub 15 SP5",
"product": {
"name": "SUSE Package Hub 15 SP5",
"product_id": "SUSE Package Hub 15 SP5"
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-1.23.5-bp155.2.3.1.aarch64 as component of SUSE Package Hub 15 SP5",
"product_id": "SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.aarch64"
},
"product_reference": "syncthing-1.23.5-bp155.2.3.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-1.23.5-bp155.2.3.1.i586 as component of SUSE Package Hub 15 SP5",
"product_id": "SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.i586"
},
"product_reference": "syncthing-1.23.5-bp155.2.3.1.i586",
"relates_to_product_reference": "SUSE Package Hub 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-1.23.5-bp155.2.3.1.ppc64le as component of SUSE Package Hub 15 SP5",
"product_id": "SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.ppc64le"
},
"product_reference": "syncthing-1.23.5-bp155.2.3.1.ppc64le",
"relates_to_product_reference": "SUSE Package Hub 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-1.23.5-bp155.2.3.1.s390x as component of SUSE Package Hub 15 SP5",
"product_id": "SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.s390x"
},
"product_reference": "syncthing-1.23.5-bp155.2.3.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-1.23.5-bp155.2.3.1.x86_64 as component of SUSE Package Hub 15 SP5",
"product_id": "SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.x86_64"
},
"product_reference": "syncthing-1.23.5-bp155.2.3.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64 as component of SUSE Package Hub 15 SP5",
"product_id": "SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64"
},
"product_reference": "syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.i586 as component of SUSE Package Hub 15 SP5",
"product_id": "SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.i586"
},
"product_reference": "syncthing-relaysrv-1.23.5-bp155.2.3.1.i586",
"relates_to_product_reference": "SUSE Package Hub 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le as component of SUSE Package Hub 15 SP5",
"product_id": "SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le"
},
"product_reference": "syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le",
"relates_to_product_reference": "SUSE Package Hub 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x as component of SUSE Package Hub 15 SP5",
"product_id": "SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x"
},
"product_reference": "syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64 as component of SUSE Package Hub 15 SP5",
"product_id": "SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64"
},
"product_reference": "syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-1.23.5-bp155.2.3.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.aarch64"
},
"product_reference": "syncthing-1.23.5-bp155.2.3.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-1.23.5-bp155.2.3.1.i586 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.i586"
},
"product_reference": "syncthing-1.23.5-bp155.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-1.23.5-bp155.2.3.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.ppc64le"
},
"product_reference": "syncthing-1.23.5-bp155.2.3.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-1.23.5-bp155.2.3.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.s390x"
},
"product_reference": "syncthing-1.23.5-bp155.2.3.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-1.23.5-bp155.2.3.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.x86_64"
},
"product_reference": "syncthing-1.23.5-bp155.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64"
},
"product_reference": "syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.i586 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.i586"
},
"product_reference": "syncthing-relaysrv-1.23.5-bp155.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le"
},
"product_reference": "syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x"
},
"product_reference": "syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64"
},
"product_reference": "syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-46165",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-46165"
}
],
"notes": [
{
"category": "general",
"text": "Syncthing is an open source, continuous file synchronization program. In versions prior to 1.23.5 a compromised instance with shared folders could sync malicious files which contain arbitrary HTML and JavaScript in the name. If the owner of another device looks over the shared folder settings and moves the mouse over the latest sync, a script could be executed to change settings for shared folders or add devices automatically. Additionally adding a new device with a malicious name could embed HTML or JavaScript inside parts of the page. As a result the webUI may be subject to a stored cross site scripting attack. This issue has been addressed in version 1.23.5. Users are advised to upgrade. Users unable to upgrade should avoid sharing folders with untrusted users.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.aarch64",
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.i586",
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.ppc64le",
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.s390x",
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.x86_64",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.i586",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.aarch64",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.i586",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.ppc64le",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.s390x",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.x86_64",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.i586",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-46165",
"url": "https://www.suse.com/security/cve/CVE-2022-46165"
},
{
"category": "external",
"summary": "SUSE Bug 1212085 for CVE-2022-46165",
"url": "https://bugzilla.suse.com/1212085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.aarch64",
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.i586",
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.ppc64le",
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.s390x",
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.x86_64",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.i586",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.aarch64",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.i586",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.ppc64le",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.s390x",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.x86_64",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.i586",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.aarch64",
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.i586",
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.ppc64le",
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.s390x",
"SUSE Package Hub 15 SP5:syncthing-1.23.5-bp155.2.3.1.x86_64",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.i586",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x",
"SUSE Package Hub 15 SP5:syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.aarch64",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.i586",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.ppc64le",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.s390x",
"openSUSE Leap 15.5:syncthing-1.23.5-bp155.2.3.1.x86_64",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.aarch64",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.i586",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.ppc64le",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.s390x",
"openSUSE Leap 15.5:syncthing-relaysrv-1.23.5-bp155.2.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-06-12T14:01:56Z",
"details": "moderate"
}
],
"title": "CVE-2022-46165"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…