Debian/cfrpki: medium 5.5
When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root ( https://github
Action: Upgrade cfrpki to 1.4.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.2-1 | - |
Fixed versions
| 1.4.2-1 |
Sources
published · modified · JSON