SharePoint 2016 Server installation: EOL/Obsolete Software: Microsoft Sync Framework Detected

Question

Qualys is reporting this as a critical security issue. I am looking for an update for Microsoft Sync Framework 1.0 and the only thing I find is that if it was installed as a part of SharePoint 2016 is it supported beyond the EOL. If it is supported, is there an update available? I did find Microsoft Sync Framework 2.1 SDK that is newer but it doesn't appear that it will work with SharePoint 2016 Server.

Answer 1

@Payne, Scott

Per my research, there is no update for Microsoft Sync Framework 1.0.

There is only Service Pack 1 for Microsoft Sync Framework 1.0. According to this article, Sync Framework 1.0 SP1 support ends on the date indicated unless distributed as a component of SharePoint Server 2010, 2013, 2016, or 2019. Components receive the same support as their parent product or platform.

The supported operating systems of Microsoft Sync Framework 2.1 are different from the supported operating systems of SharePoint Server 2016.

---

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

I opened a ticket with MS support. There are no updates for Microsoft Sync Framework v1 sp1 used with SharePoint. So if you are asked to update to latest version and you are running SharePoint, don't. The version you installed as a pre-req is the version SharePoint expects.