#47627 syncthing package is vulnerable to CVE-2021-21404

Received: (at control) by debbugs.gnu.org; 6 Apr 2021 22:41:31 +0000
From debbugs-submit-bounces@debbugs.gnu.org Tue Apr 06 18:41:31 2021
Received: from localhost ([127.0.0.1]:42240 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1lTuO3-0000vM-11
	for submit@debbugs.gnu.org; Tue, 06 Apr 2021 18:41:31 -0400
Received: from mail.zaclys.net ([178.33.93.72]:40803)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <lle-bout@zaclys.net>) id 1lTuO1-0000vB-QG
 for control@debbugs.gnu.org; Tue, 06 Apr 2021 18:41:30 -0400
Received: from [192.168.1.115] (lsl43-1_migr-78-195-19-20.fbx.proxad.net
 [78.195.19.20] (may be forged)) (authenticated bits=0)
 by mail.zaclys.net (8.14.7/8.14.7) with ESMTP id 136MfOrT008193
 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO)
 for <control@debbugs.gnu.org>; Wed, 7 Apr 2021 00:41:24 +0200
DMARC-Filter: OpenDMARC Filter v1.3.2 mail.zaclys.net 136MfOrT008193
Authentication-Results: mail.zaclys.net;
 dmarc=fail (p=reject dis=none) header.from=zaclys.net
Authentication-Results: mail.zaclys.net;
 spf=fail smtp.mailfrom=lle-bout@zaclys.net
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zaclys.net;
 s=default; t=1617748884;
 bh=mv7dbTbgEUgvc68DWJFOpwpfEjoDotUePemn2GsGtmo=;
 h=Subject:From:To:Date:From;
 b=nJv0R57oBSBFJS2pjmEoahr5dV0uDscLH6tEI9GmHyvdUcAnMmXxDEgRffQ49mVMJ
 6l+iZ6S28NDd9Ygb1MsKnnVdwxMM2eEixsxdTU0psL7a3Gk2C6Pc1r0dR47g66Lc0b
 sntcckrewdFLEfQgXO+xknkap/WF+DYA2pj6SQzw=
Message-ID: <e680139bcfbd4cb950c09bd4bb6c82d109a89707.camel@zaclys.net>
Subject: 
From: Léo Le Bouter <lle-bout@zaclys.net>
To: control@debbugs.gnu.org
Date: Wed, 07 Apr 2021 00:41:23 +0200
Content-Type: multipart/signed; micalg="pgp-sha512";
 protocol="application/pgp-signature"; boundary="=-LSdEfj9iYCN11YKyN9tO"
User-Agent: Evolution 3.34.2 
MIME-Version: 1.0
X-Spam-Score: 2.0 (++)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  tags 47627 + security quit 
 Content analysis details:   (2.0 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 -0.0 SPF_PASS               SPF: sender matches SPF record
 2.0 BLANK_SUBJECT          Subject is present but empty
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: 1.0 (+)