—
GO-2022-0250
Infinite open connection causes OctoRPKI to hang forever in github.com/cloudflare/cfrpki
Quick fix
GO-2022-0250 — github.com/cloudflare/cfrpki: upgrade to the fixed version with the command below.
go get github.com/cloudflare/cfrpki@v1.4.0Details
Infinite open connection causes OctoRPKI to hang forever in github.com/cloudflare/cfrpki
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/cloudflare/cfrpki
Introduced in:
0Fixed in: 1.4.0Fix
go get github.com/cloudflare/cfrpki@v1.4.0References
- https://github.com/cloudflare/cfrpki/security/advisories/GHSA-8cvr-4rrf-f244[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2021-3909[ADVISORY]
- https://github.com/cloudflare/cfrpki/releases/tag/v1.4.0[WEB]
- https://www.debian.org/security/2021/dsa-5033[WEB]
- https://www.debian.org/security/2022/dsa-5041[WEB]