projects / trafficserver.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(merge: d855e06 f893410)
trafficserver (8.0.2+ds-1+deb10u6) buster-security; urgency=high
authorJean Baptiste Favre <debian@jbfavre.org>
Sat, 21 May 2022 19:14:28 +0000 (20:14 +0100)
committerJean Baptiste Favre <debian@jbfavre.org>
Sat, 21 May 2022 19:14:28 +0000 (20:14 +0100)
commit56da3d59132faf13e47161f9b976070ba78a1a16
tree24753dc579f86497c1acc8fb9b2b1f80a405ec9ftree | snapshot
parentd855e0677355c6ab9962d702ed8d03c2cef9d5a9commit | diff
parentf8934102833f7d17e161b19627a8daf7f4009262commit | diff
trafficserver (8.0.2+ds-1+deb10u6) buster-security; urgency=high

  * Multiple CVE fixes for 8.0.x
    + CVE-2021-37147: Improper input validation vulnerability
    + CVE-2021-37148: Improper input validation vulnerability
    + CVE-2021-37149: Improper Input Validation vulnerability
    + CVE-2021-38161: Improper Authentication vulnerability in TLS origin verification
    + CVE-2021-44040: Improper Input Validation vulnerability in request line parsing
    + CVE-2021-44759: Improper Authentication vulnerability in TLS origin validation

[dgit import unpatched trafficserver 8.0.2+ds-1+deb10u6]
59 files changed:
debian/CONFIGURATION.Debian | | blob
debian/NEWS | | blob
debian/README.Debian | | blob
debian/README.conf-remap.Debian | | blob
debian/change_config.pl | | blob
debian/changelog | | blob
debian/compat | | blob
debian/control | | blob
debian/copyright | | blob
debian/docs | | blob
debian/gbp.conf | | blob
debian/gitlab-ci.yml | | blob
debian/not-installed | | blob
debian/patches/0001-Use-mcx16-on-x86-platforms-only.patch | | blob
debian/patches/0003-reproductible-build.patch | | blob
debian/patches/0006-fix-doc-build.patch | | blob
debian/patches/0008-fix-python-check-unused-dependencies.patch | | blob
debian/patches/0009-fix-mysql-8-build.patch | | blob
debian/patches/0011-fix-segfault.patch | | blob
debian/patches/0012-fix-spelling-checks.patch | | blob
debian/patches/0013-fix-perl-interpreter-path.patch | | blob
debian/patches/0014-use_system_yaml-cpp.patch | | blob
debian/patches/0015-8.0.4-CVE-backport.patch | | blob
debian/patches/0015-8.0.5-CVE-backport.patch | | blob
debian/patches/0016-CVE-2019-17559.patch | | blob
debian/patches/0016-CVE-2019-17565.patch | | blob
debian/patches/0016-CVE-2020-1944.patch | | blob
debian/patches/0016-CVE-2020-9481.patch | | blob
debian/patches/0017-CVE-2020-9494.patch | | blob
debian/patches/0018-CVE-2020-17508.patch | | blob
debian/patches/0018-CVE-2020-17509.patch | | blob
debian/patches/0019-CVE-2021-35474_32567_32566_32565_27577.patch | | blob
debian/patches/0020-CVE-2021-37147.patch | | blob
debian/patches/0020-CVE-2021-37148.patch | | blob
debian/patches/0020-CVE-2021-37149.patch | | blob
debian/patches/0020-CVE-2021-38161.patch | | blob
debian/patches/0021-CVE_2021_44040.patch | | blob
debian/patches/0021-CVE_2021_44759.patch | | blob
debian/patches/series | | blob
debian/rules | | blob
debian/source/format | | blob
debian/source/options | | blob
debian/trafficserver-dev.examples | | blob
debian/trafficserver-dev.install | | blob
debian/trafficserver-dev.manpages | | blob
debian/trafficserver-experimental-plugins.install | | blob
debian/trafficserver-experimental-plugins.lintian-overrides | | blob
debian/trafficserver.default | | blob
debian/trafficserver.dirs | | blob
debian/trafficserver.example | | blob
debian/trafficserver.init | | blob
debian/trafficserver.install | | blob
debian/trafficserver.maintscript | | blob
debian/trafficserver.manpages | | blob
debian/trafficserver.postinst | | blob
debian/trafficserver.service | | blob
debian/trafficserver.tmpfile | | blob
debian/upstream/signing-key.asc | | blob
debian/watch | | blob
Unnamed repository; edit this file 'description' to name the repository.