Every Go application since 1.24 will activate MPTCP on their sockets by default.

And I've read that this includes Syncthing, which is why I'm posting this here

other discussions
 

cross-posted from: https://sh.itjust.works/post/69184872

Every Go application since 1.24 will activate MPTCP on their sockets by default.

And I've read that this includes Syncthing, which is why I'm posting this here

 

A critical vulnerability in the Linux kernel's TCP implementation has been assigned a CVSS score of 9.8, impacting multiple distributions including Ubuntu and Red Hat. The flaw involves improper handling of TCP connections and could allow remote attackers to cause denial-of-service conditions. The issue is being tracked by major Linux vendors and patches are available in upstream kernel and distribution repositories. Users are advised to update their systems promptly.