Hello,
Turns out this is a false positive and was already fixed in Debian, through golang-github-golang-snappy version 0.0.2-3. See: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1096178#20 Please close, my apologies for the confusion. Regards, André