# Syncthing v1.28.1 \[contains security fix\]
**URL:** https://forum.syncthing.net/t/syncthing-v1-28-1-contains-security-fix/23347
**Category:** Release
**Created:** [December 3, 2024, 12:06pm UTC](https://forum.syncthing.net/t/syncthing-v1-28-1-contains-security-fix/23347 "2024-12-03T12:06:05Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@calmh](https://forum.syncthing.net/u/calmh)
#### Post date: [December 3, 2024, 12:06pm UTC](https://forum.syncthing.net/t/syncthing-v1-28-1-contains-security-fix/23347/1 "2024-12-03T12:06:06Z")
# [v1.28.1](https://github.com/syncthing/syncthing/releases/v1.28.1)
## Security
Version 1.28.0 added a bug where block request messages to untrusted devices would include the hash of the plaintext block being requested. This isn’t recorded anywhere on the untrusted device by a stock Syncthing, but a potentially modified/illicit Syncthing instance could in principle record the plaintext hashes of encrypted data, thus being able to draw some conclusions about the data being stored.
## Bugfixes
- [#9400](https://github.com/syncthing/syncthing/issues/9400): Folder overlap not detected when using tilde
- [#9590](https://github.com/syncthing/syncthing/issues/9590): WebUI table column widths broken on iPhone 12 Pro Max and wider
- [#9686](https://github.com/syncthing/syncthing/issues/9686): Sync status stays at 'Syncing xx%" when remote device pauses the folder.
- [#9757](https://github.com/syncthing/syncthing/issues/9757): Firefox, dark theme: device ID is hard to read
- [#9775](https://github.com/syncthing/syncthing/issues/9775): Junctions as dirs doesn’t work anymore
- [#9776](https://github.com/syncthing/syncthing/issues/9776): Disabled checkbox panels don’t respect dark theme
- [#9783](https://github.com/syncthing/syncthing/issues/9783): gui: Address override not respected in fresh default config
- [#9821](https://github.com/syncthing/syncthing/issues/9821): panic: runtime error: index out of range [-1]
## Enhancements
- [#9725](https://github.com/syncthing/syncthing/issues/9725): Ignoring symbolic links when syncing on android as well
---
### Author:  [@system](https://forum.syncthing.net/u/system)
#### Post date: [January 2, 2025, 12:06pm UTC](https://forum.syncthing.net/t/syncthing-v1-28-1-contains-security-fix/23347/2 "2025-01-02T12:06:08Z")
This topic was automatically closed after 30 days. New replies are no longer allowed.