dgit.raspbian.org Git - trafficserver.git/log

Merge trafficserver (8.1.11+ds-0+deb11u2) import into refs/heads/workingbranch

[PATCH] Fix unchecked return value of initgroups() plugin (#11856)

The patches have beem merged into one.

Reviewed-By: Daniel Leidert <dleidert@debian.org>
Origin: https://github.com/apache/trafficserver/pull/11855
Origin: https://github.com/apache/trafficserver/pull/11872
Bug: https://github.com/advisories/GHSA-6j2p-q7p9-hmxw
Bug-Debian: https://bugs.debian.org/1087531
Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2024-50306
Bug-Freexian-Security: https://deb.freexian.com/extended-lts/tracker/CVE-2024-50306

Gbp-Pq: Name CVE-2024-50306.patch

Add matrix params to the cachekey in the cachekey plugin (#11856)

Reviewed-By: Daniel Leidert <dleidert@debian.org>
Origin: https://github.com/apache/trafficserver/pull/11856
Bug: https://github.com/apache/trafficserver/pull/11856
Bug-Debian: https://bugs.debian.org/1087531
Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2024-38479
Bug-Freexian-Security: https://deb.freexian.com/extended-lts/tracker/CVE-2024-38479

Gbp-Pq: Name CVE-2024-38479.patch

Fix test for python 3.8

Reviewed-by: Jean Baptiste Favre <jbfavre@debian.org>
Last-Update: 2020-02-03

Last-Update: 2020-02-03
Gbp-Pq: Name 0016-fix_python_3.8.patch

Update compilation chain after embedded libyamlcpp removal

Origin: other
Reviewed-by: Jean Baptiste Favre <debian@jbfavre.org>
Last-Update: 2019-01-30

Last-Update: 2019-01-30
Gbp-Pq: Name 0014-use_system_yaml-cpp.patch

Fix Perl interpreter path

Reviewed-by: Jean Baptiste Favre <debian@jbfavre.org>
Last-Update: 2019-01-03

Last-Update: 2019-01-03
Gbp-Pq: Name 0013-fix-perl-interpreter-path.patch

Fix various speeling issues

Forwarded: https://github.com/apache/trafficserver/pull/4750
Applied-Upstream: https://github.com/apache/trafficserver/commit/af0ad4a1880a21743e98331855bb78e15d5406ef
Last-Update: 2019-01-03

Last-Update: 2019-01-03
Gbp-Pq: Name 0012-fix-spelling-checks.patch

Fix Segmentation fault in ShowCache::handleCacheEvent

Origin: upstream
Bug: https://github.com/apache/trafficserver/issues/4328
Applied-Upstream: https://github.com/apache/trafficserver/commit/616eb10bfc35599a2c93ff30879d584a05ddf83e
Reviewed-by: Jean Baptiste Favre <debian@jbfavre.org>
Last-Update: 2018-10-17

Last-Update: 2018-10-17
Gbp-Pq: Name 0011-fix-segfault.patch

Fix build issue with MySQL 8

Origin: other, https://bugs.launchpad.net/ubuntu/+source/trafficserver/+bug/1795362
Forwarded: https://github.com/apache/trafficserver/pull/4360
Applied-Upstream: https://github.com/apache/trafficserver/commit/05b30527974416768515506f69da338652c23260
Reviewed-by: Jean Baptiste Favre <debian@jbfavre.org>
Last-Update: 2018-10-06

The my_bool type is no longer used in MySQL source code.
Any third-party code that used this type to represent C
boolean variables should use the bool or int C type instead.
Last-Update: 2018-10-06
Gbp-Pq: Name 0009-fix-mysql-8-build.patch

Force python3 usage, add libfakeroot-sysv to blacklist

Origin: other
Last-Update: 2018-09-24

Last-Update: 2018-09-24
Gbp-Pq: Name 0008-fix-python-check-unused-dependencies.patch

Make documentation build works outside of git repository

Origin: other
Last-Update: 2019-01-03

Current documentation build requires git and curl to get some stuff from the internet
This patch aims to delete those dependencies, forcing git branch to master,
and using Debian provided plantuml instead of downloading it from apache mirror
Last-Update: 2019-01-03
Gbp-Pq: Name 0006-fix-doc-build.patch

make the build reproducible

Origin: other, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=833176
Reviewed-by: Jean Baptiste Favre <debian@jbfavre.org>
Last-Update: 2016-11-18

Last-Update: 2016-11-18
Gbp-Pq: Name 0003-reproductible-build.patch

trafficserver (8.1.11+ds-0+deb11u2) bullseye-security; urgency=medium

  * Non-maintainer upload by the Debian LTS Team.
  * d/patches/CVE-2024-38479.patch: Fix CVE-2024-38479 (closes: #1087531).
    - Fix improper Input Validation vulnerability in Apache Traffic Server.
  * d/patches/CVE-2024-50306.patch: Fix CVE-2024-50306 (closes: #1087531).
    - Fix a possible problem that can allow Apache Traffic Server to retain
      privileges on startup.

[dgit import unpatched trafficserver 8.1.11+ds-0+deb11u2]

Import trafficserver_8.1.11+ds-0+deb11u2.debian.tar.xz

[dgit import tarball trafficserver 8.1.11+ds-0+deb11u2 trafficserver_8.1.11+ds-0+deb11u2.debian.tar.xz]

Merge trafficserver (8.1.11+ds-0+deb11u1) import into refs/heads/workingbranch

Import trafficserver_8.1.11+ds.orig.tar.xz

[dgit import orig trafficserver_8.1.11+ds.orig.tar.xz]