# Syncthing v0.13.2 and v0.12.25 released

**URL:** https://forum.syncthing.net/t/syncthing-v0-13-2-and-v0-12-25-released/7421
**Category:** Announce
**Created:** [May 22, 2016, 1:50am UTC](https://forum.syncthing.net/t/syncthing-v0-13-2-and-v0-12-25-released/7421 "2016-05-22T01:50:14Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![calmh](https://forum.syncthing.net/user_avatar/forum.syncthing.net/calmh/32/15311_2.png) [@calmh](https://forum.syncthing.net/u/calmh)
#### Post date: [May 22, 2016, 1:50am UTC](https://forum.syncthing.net/t/syncthing-v0-13-2-and-v0-12-25-released/7421/1 "2016-05-22T01:50:14Z")

</div>

These are security releases and recommended for everyone. The auto upgrade should already have upgraded you if that is enabled, otherwise please do the needful to get the latest version using your chosen method.

> **[syncthing/syncthing](https://github.com/syncthing/syncthing/releases/tag/v0.13.2)**
>
> syncthing - Open Source Continuous File Synchronization

---

<div class="post-metadata">

### Author: ![calmh](https://forum.syncthing.net/user_avatar/forum.syncthing.net/calmh/32/15311_2.png) [@calmh](https://forum.syncthing.net/u/calmh)
#### Post date: [May 22, 2016, 1:50am UTC](https://forum.syncthing.net/t/syncthing-v0-13-2-and-v0-12-25-released/7421/2 "2016-05-22T01:50:27Z")

</div>



---

<div class="post-metadata">

### Author: ![lfam](https://forum.syncthing.net/letter_avatar_proxy/v4/letter/l/ea666f/32.png) [@lfam](https://forum.syncthing.net/u/lfam)
#### Post date: [May 22, 2016, 2:33am UTC](https://forum.syncthing.net/t/syncthing-v0-13-2-and-v0-12-25-released/7421/3 "2016-05-22T02:33:32Z")

</div>

Can you clarify when this vulnerability was introduced?

Also, am I right to assume that it’s still present in syncthing-android, SyncTrazor, and any other platform-specific wrappers?

---

<div class="post-metadata">

### Author: ![calmh](https://forum.syncthing.net/user_avatar/forum.syncthing.net/calmh/32/15311_2.png) [@calmh](https://forum.syncthing.net/u/calmh)
#### Post date: [May 22, 2016, 4:45am UTC](https://forum.syncthing.net/t/syncthing-v0-13-2-and-v0-12-25-released/7421/4 "2016-05-22T04:45:57Z")

</div>

A long time ago, probably on the order of v0.11 or thereabouts - I’m currently on mobile so unsure.

The android wrapper sets up authentication by default so is _not_ affected by this, I think. The other wrappers are neither vulnerable nor invulnerable - the problem is in the core syncthing module that they use. When syncthing upgrades, or is upgraded by the wrapper, you’re fine.

If you have authentication enabled on the GUI you’re also fine, regardless of version.

---

<div class="post-metadata">

### Author: ![Nutomic](https://forum.syncthing.net/user_avatar/forum.syncthing.net/nutomic/32/270_2.png) [@Nutomic](https://forum.syncthing.net/u/Nutomic)
#### Post date: [May 22, 2016, 9:58am UTC](https://forum.syncthing.net/t/syncthing-v0-13-2-and-v0-12-25-released/7421/5 "2016-05-22T09:58:46Z")

</div>

Yeah we always set user/password automatically on Android before Syncthing is started for the first time.

---

<div class="post-metadata">

### Author: ![calmh](https://forum.syncthing.net/user_avatar/forum.syncthing.net/calmh/32/15311_2.png) [@calmh](https://forum.syncthing.net/u/calmh)
#### Post date: [May 29, 2016, 2:02am UTC](https://forum.syncthing.net/t/syncthing-v0-13-2-and-v0-12-25-released/7421/6 "2016-05-29T02:02:28Z")

</div>

This topic was automatically closed after 7 days. New replies are no longer allowed.
