cfrpki 1.4.2-1~deb11u1 source package in Debian

Changelog

cfrpki (1.4.2-1~deb11u1) bullseye-security; urgency=high

  * Rebuild for bullseye-security. Fixes:
    - Certificate chain loop.
    - RRDP Gzip bomb (CVE-2021-43174 CVE-2021-3912).
    - RRDP Slowloris (CVE-2021-43173 CVE-2021-3909).
    - ROA with ASCII NUL char (CVE-2021-3910).
    - Malformed ROAs (CVE-2021-3911).
    - Repo contains 100GB of trash.
    - Dot-dot-slash path traversal (CVE-2021-3907).
    - Improper preservation of permissions (CVE-2021-3978).

 -- Marco d'Itri <email address hidden>  Sun, 26 Dec 2021 14:38:26 +0100