<div dir="ltr">After fixing this bug, we’ll need to rebuild the following binaries:<div><br></div><div><div>golang-github-hashicorp-consul-dev</div><div>golang-github-hashicorp-mdns-dev</div><div>golang-github-xenolf-lego-dev</div><div><a href="http://docker.io">docker.io</a></div><div>prometheus-blackbox-exporter</div><div>coyim</div><div>rawdns</div><div>goiardi</div><div>prometheus</div><div>dnss</div><div>kubernetes-client</div><div>golang-dns-dev</div><div>golang-github-hashicorp-memberlist-dev</div><div>golang-github-skynetservices-skydns-dev</div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Jan 29, 2018 at 8:57 PM, Salvatore Bonaccorso <span dir="ltr"><<a href="mailto:carnil@debian.org" target="_blank">carnil@debian.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Source: golang-github-miekg-dns<br>
Version: 0.0~git20161018.0.58f52c5-1<br>
Severity: important<br>
Tags: patch security upstream<br>
<br>
Hi,<br>
<br>
the following vulnerability was published for golang-github-miekg-dns.<br>
<br>
CVE-2017-15133[0]:<br>
| A denial of service flaw was found in miekg-dns before 1.0.4. A remote<br>
| attacker could use carefully timed TCP packets to block the DNS server<br>
| from accepting new connections.<br>
<br>
If you fix the vulnerability please also make sure to include the<br>
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.<br>
<br>
For further information see:<br>
<br>
[0] <a href="https://security-tracker.debian.org/tracker/CVE-2017-15133" rel="noreferrer" target="_blank">https://security-tracker.<wbr>debian.org/tracker/CVE-2017-<wbr>15133</a><br>
    <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15133" rel="noreferrer" target="_blank">https://cve.mitre.org/cgi-bin/<wbr>cvename.cgi?name=CVE-2017-<wbr>15133</a><br>
[1] <a href="https://github.com/miekg/dns/issues/627" rel="noreferrer" target="_blank">https://github.com/miekg/dns/<wbr>issues/627</a><br>
<br>
Please adjust the affected versions in the BTS as needed.<br>
<br>
Regards,<br>
Salvatore<br>
<br>
______________________________<wbr>_________________<br>
Pkg-go-maintainers mailing list<br>
<a href="mailto:Pkg-go-maintainers@lists.alioth.debian.org">Pkg-go-maintainers@lists.<wbr>alioth.debian.org</a><br>
<a href="http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-go-maintainers" rel="noreferrer" target="_blank">http://lists.alioth.debian.<wbr>org/cgi-bin/mailman/listinfo/<wbr>pkg-go-maintainers</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature">Best regards,<br>Michael</div>
</div>