Improvements since 1.6.7:
- GHSA-qfm3-577x-rh54: Prevent RRDP cache poisoning
- #112: Refuse cross-origin RRDP
- #175: Skip hidden files and directories when synchronizing via Rsync
- 016f399: Reject negative certificate serial numbers
Full Changelog: 1.6.7...1.6.8
Thanks to
- Qi Wang (Tsinghua University)
- Jianjun Chen (Tsinghua University)
for the GHSA-qfm3-577x-rh54 security advisory.