tocsin

Debian/fort-validator: high 7.5

An integer underflow was discovered in Fort 1.6.3 and 1.6.4 before 1.6.5. A malicious RPKI repository that descends from a (trusted) Trust Anchor can serve (via rsync or RRDP) a Manifest RPKI object c

Action: Upgrade fort-validator to 1.6.5-1 or later.

Affected

introducedfixedlast affected
01.6.5-1-

Fixed versions

1.6.5-1

Sources

published · modified · JSON