Your message dated Tue, 30 Jan 2018 09:20:51 +0000
with message-id <e1egs5z-0006zd...@fasolo.debian.org>
and subject line Bug#888777: fixed in golang-github-miekg-dns
0.0~git20170501.0.f282f80-3
has caused the Debian Bug report #888777,
regarding golang-github-miekg-dns: CVE-2017-15133
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
888777: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888777
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: golang-github-miekg-dns
Version: 0.0~git20161018.0.58f52c5-1
Severity: important
Tags: patch security upstream
Hi,
the following vulnerability was published for golang-github-miekg-dns.
CVE-2017-15133[0]:
| A denial of service flaw was found in miekg-dns before 1.0.4. A remote
| attacker could use carefully timed TCP packets to block the DNS server
| from accepting new connections.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2017-15133
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15133
[1] https://github.com/miekg/dns/issues/627
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: golang-github-miekg-dns
Source-Version: 0.0~git20170501.0.f282f80-3
We believe that the bug you reported is fixed in the latest version of
golang-github-miekg-dns, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 888...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Stapelberg <stapelb...@debian.org> (supplier of updated
golang-github-miekg-dns package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 30 Jan 2018 09:23:21 +0100
Source: golang-github-miekg-dns
Binary: golang-github-miekg-dns-dev golang-dns-dev
Architecture: source
Version: 0.0~git20170501.0.f282f80-3
Distribution: unstable
Urgency: medium
Maintainer: pkg-go <pkg-go-maintainers@lists.alioth.debian.org>
Changed-By: Michael Stapelberg <stapelb...@debian.org>
Description:
golang-dns-dev - transitional package for golang-github-miekg-dns-dev
golang-github-miekg-dns-dev - DNS protocol library for Go
Closes: 888777
Changes:
golang-github-miekg-dns (0.0~git20170501.0.f282f80-3) unstable; urgency=medium
.
* Apply patch for CVE-2017-15133 (Closes: #888777)
Checksums-Sha1:
61b94e3612320e3cb563951a6c711254b7119a23 2472
golang-github-miekg-dns_0.0~git20170501.0.f282f80-3.dsc
fe92b018afb6de26707feb6b30be1de4cc5050e7 4760
golang-github-miekg-dns_0.0~git20170501.0.f282f80-3.debian.tar.xz
a87463bc735f59663feb240891436d5190b28415 6083
golang-github-miekg-dns_0.0~git20170501.0.f282f80-3_amd64.buildinfo
Checksums-Sha256:
26a81f88e0d97cd0d6234f70fc81593a7d08491c5ce543675c74b36205961c0a 2472
golang-github-miekg-dns_0.0~git20170501.0.f282f80-3.dsc
bace73ee7364ee91b48c5f09c8e83a7760b335141a9fb3eb614418268fa6e919 4760
golang-github-miekg-dns_0.0~git20170501.0.f282f80-3.debian.tar.xz
4147c6cd61668dbcf09ed644f710bae945ffdcc0c59ef76bf439882272b9bc1e 6083
golang-github-miekg-dns_0.0~git20170501.0.f282f80-3_amd64.buildinfo
Files:
63fcef63f4f1b9eba6d053b66eed8c08 2472 devel extra
golang-github-miekg-dns_0.0~git20170501.0.f282f80-3.dsc
4c3cf8cc9aead25a68bc619bd50768c6 4760 devel extra
golang-github-miekg-dns_0.0~git20170501.0.f282f80-3.debian.tar.xz
c165a0d2535d872dfdffee392f947fb2 6083 devel extra
golang-github-miekg-dns_0.0~git20170501.0.f282f80-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=zcFf
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Pkg-go-maintainers mailing list
Pkg-go-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-go-maintainers
