1. Forum
  2. Usenet
  3. LINUX.DEBIAN.CHANGES

  • Accepted cfrpki 1.4.2-1~deb11u1 (source) into proposed-updates->stable-

    From Debian FTP Masters@21:1/5 to All on Sat Jan 22 20:20:02 2022
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA256

    Format: 1.8
    Date: Sun, 26 Dec 2021 14:38:26 +0100
    Source: cfrpki
    Architecture: source
    Version: 1.4.2-1~deb11u1
    Distribution: bullseye-security
    Urgency: high
    Maintainer: Marco d'Itri <md@linux.it>
    Changed-By: Marco d'Itri <md@linux.it>
    Changes:
    cfrpki (1.4.2-1~deb11u1) bullseye-security; urgency=high
    .
    * Rebuild for bullseye-security. Fixes:
    - Certificate chain loop.
    - RRDP Gzip bomb (CVE-2021-43174 CVE-2021-3912).
    - RRDP Slowloris (CVE-2021-43173 CVE-2021-3909).
    - ROA with ASCII NUL char (CVE-2021-3910).
    - Malformed ROAs (CVE-2021-3911).
    - Repo contains 100GB of trash.
    - Dot-dot-slash path traversal (CVE-2021-3907).
    - Improper preservation of permissions (CVE-2021-3978).
    Checksums-Sha1:
    e7d14c52722c7fd15ae93d07ab6c8bc4d46328fd 1748 cfrpki_1.4.2-1~deb11u1.dsc
    4b2662c7410b49e6c02b9eb8aa457ab5a66bcc72 2092264 cfrpki_1.4.2.orig.tar.xz
    64615487a84b29393491f4f9a1d067570c9aa746 5496 cfrpki_1.4.2-1~deb11u1.debian.tar.xz
    08abdf712d5d2fec0d35849d3b522d74863b0df2 8779 cfrpki_1.4.2-1~deb11u1_amd64.buildinfo
    Checksums-Sha256:
    de2d0d2e6cee557f18457f4fb81dc074df5a158add7c23bfa5694bdb61c814c9 1748 cfrpki_1.4.2-1~deb11u1.dsc
    48d1ae5053afa81884ecfcba2bafa6b338304d7f41c97a4cf0a036d66c98eebd 2092264 cfrpki_1.4.2.orig.tar.xz
    2f2f98f435af0ec205166e2046addae8b773511cd6727332af19464ed50033f9 5496 cfrpki_1.4.2-1~deb11u1.debian.tar.xz
    b83d40466e696b26c16a2b08535607faa6bac91d5a40da4ac5c07a0b2c4b416a 8779 cfrpki_1.4.2-1~deb11u1_amd64.buildinfo
    Files:
    06637fbb5c09878372708bf8b94ba183 1748 net optional cfrpki_1.4.2-1~deb11u1.dsc
    3e3c595b5fba7fad1036360e148b2f49 2092264 net optional cfrpki_1.4.2.orig.tar.xz
    cb66910f3862553f48a49f990eca3e60 5496 net optional cfrpki_1.4.2-1~deb11u1.debian.tar.xz
    f13e9e883ecd21c2d645b2673b25deeb 8779 net optional cfrpki_1.4.2-1~deb11u1_amd64.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iHUEARYIAB0WIQQnKUXNg20437dCfobLPsM64d7XgQUCYciKMwAKCRDLPsM64d7X gXNGAP9GWfGuPSDPba6AlpTKOeVeHagKi2stM6sd+zKqniPQNgD/b+qXgH6AQwnV 2ec8E/BJVqXrGrnhcZy4Vk1bAMdwEws=
    =hzAv
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)