[SECURITY] [DSA 5041-1] cfrpki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5041-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 11, 2022 https://www.debian.org/security/faq -...

CVE-2021-3912

creationtimestamp| type| source ---|---|--- 2021-11-12 00:38:09+00:00| seen| https://t.me/cibsecurity/32264...

CVE-2021-3912

CVE-2021-3912 affects OctoRPKI: it loads an entire repository into memory and can unzip a gzip bomb in memory, enabling resource exhaustion and a crash. The vulnerability is described consistently across multiple feeds as a memory/CPU exhaustion issue triggered by oversized input or crafted archi...