[pkg-go] Bug#983659: marked as done (golang-github-appc-cni: CVE-2021-20206)

2021-02-28 Thread Debian Bug Tracking System
Your message dated Sun, 28 Feb 2021 12:03:57 + with message-id and subject line Bug#983659: fixed in golang-github-appc-cni 0.8.1-1 has caused the Debian Bug report #983659, regarding golang-github-appc-cni: CVE-2021-20206 to be marked as done. This means that you claim that the problem has

[pkg-go] Bug#983670: syncthing: Connection take a long time to close after an error

2021-02-28 Thread Simon Frei
Package: syncthing Version: 1.12.1~ds1-2 Severity: important As discussed on the go-team mailing list [1], I am filing this bug to address an important fix in upstream since the version to be included in stable. If an error occurs on the connection, the underlying tls connection isn't closed.

[pkg-go] Bug#983669: syncthing: Mismatching index-ids that can cause index retransfer or inconsistency

2021-02-28 Thread Simon Frei
Package: syncthing Version: 1.12.1~ds1-2 Severity: important As discussed on the go-team mailing list [1], I am filing this bug to address an important fix in upstream since the version to be included in stable. There have been reports of full index retransfers on almost every restart [2], which

[pkg-go] Bug#983668: syncthing: Prevent dead-lock in index-sender on db error

2021-02-28 Thread Simon Frei
Package: syncthing Version: 1.12.1~ds1-2 Severity: important As discussed on the go-team mailing list [1], I am filing this bug to address an important fix in upstream since the version to be included in stable. An error in the database can lead to a dead-lock in the index-sender. The patch

[pkg-go] Bug#983667: syncthing: Possible incorrect remote sync status after removing device/resetting index

2021-02-28 Thread Simon Frei
Package: syncthing Version: 1.12.1~ds1-2 Severity: important As discussed on the go-team mailing list [1], I am filing this bug to address an important fix in upstream since the version to be included in stable. There's a bug in the code that determines sync status when removing a device (or

[pkg-go] Processed: found 983659 in 0.4.0+dfsg-1

2021-02-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 983659 0.4.0+dfsg-1 Bug #983659 [src:golang-github-appc-cni] golang-github-appc-cni: CVE-2021-20206 Marked as found in versions golang-github-appc-cni/0.4.0+dfsg-1. > thanks Stopping processing here. Please contact me if you need

[pkg-go] Bug#983659: golang-github-appc-cni: CVE-2021-20206

2021-02-28 Thread Salvatore Bonaccorso
Source: golang-github-appc-cni Version: 0.8.0-2 Severity: important Tags: security upstream X-Debbugs-Cc: car...@debian.org, Debian Security Team Hi, The following vulnerability was published for golang-github-appc-cni. CVE-2021-20206[0]. If you fix the vulnerability please also make sure to