Accepted cfrpki 1.4.2-1~deb11u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 26 Dec 2021 14:38:26 +0100
Source: cfrpki
Architecture: source
Version: 1.4.2-1~deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Marco d'Itri <md@linux.it>
Changed-By: Marco d'Itri <md@linux.it>
Changes:
cfrpki (1.4.2-1~deb11u1) bullseye-security; urgency=high
.
* Rebuild for bullseye-security. Fixes:
- Certificate chain loop.
- RRDP Gzip bomb (CVE-2021-43174 CVE-2021-3912).
- RRDP Slowloris (CVE-2021-43173 CVE-2021-3909).
- ROA with ASCII NUL char (CVE-2021-3910).
- Malformed ROAs (CVE-2021-3911).
- Repo contains 100GB of trash.
- Dot-dot-slash path traversal (CVE-2021-3907).
- Improper preservation of permissions (CVE-2021-3978).
Checksums-Sha1:
e7d14c52722c7fd15ae93d07ab6c8bc4d46328fd 1748 cfrpki_1.4.2-1~deb11u1.dsc
4b2662c7410b49e6c02b9eb8aa457ab5a66bcc72 2092264 cfrpki_1.4.2.orig.tar.xz
64615487a84b29393491f4f9a1d067570c9aa746 5496 cfrpki_1.4.2-1~deb11u1.debian.tar.xz
08abdf712d5d2fec0d35849d3b522d74863b0df2 8779 cfrpki_1.4.2-1~deb11u1_amd64.buildinfo
Checksums-Sha256:
de2d0d2e6cee557f18457f4fb81dc074df5a158add7c23bfa5694bdb61c814c9 1748 cfrpki_1.4.2-1~deb11u1.dsc
48d1ae5053afa81884ecfcba2bafa6b338304d7f41c97a4cf0a036d66c98eebd 2092264 cfrpki_1.4.2.orig.tar.xz
2f2f98f435af0ec205166e2046addae8b773511cd6727332af19464ed50033f9 5496 cfrpki_1.4.2-1~deb11u1.debian.tar.xz
b83d40466e696b26c16a2b08535607faa6bac91d5a40da4ac5c07a0b2c4b416a 8779 cfrpki_1.4.2-1~deb11u1_amd64.buildinfo
Files:
06637fbb5c09878372708bf8b94ba183 1748 net optional cfrpki_1.4.2-1~deb11u1.dsc
3e3c595b5fba7fad1036360e148b2f49 2092264 net optional cfrpki_1.4.2.orig.tar.xz
cb66910f3862553f48a49f990eca3e60 5496 net optional cfrpki_1.4.2-1~deb11u1.debian.tar.xz
f13e9e883ecd21c2d645b2673b25deeb 8779 net optional cfrpki_1.4.2-1~deb11u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYIAB0WIQQnKUXNg20437dCfobLPsM64d7XgQUCYciKMwAKCRDLPsM64d7X
gXNGAP9GWfGuPSDPba6AlpTKOeVeHagKi2stM6sd+zKqniPQNgD/b+qXgH6AQwnV
2ec8E/BJVqXrGrnhcZy4Vk1bAMdwEws=
=hzAv
-----END PGP SIGNATURE-----
Reply to: