trafficserver (8.1.1+ds-1.1+deb11u1) bullseye-security; urgency=high
authorJean Baptiste Favre <debian@jbfavre.org>
Sat, 21 May 2022 17:28:31 +0000 (18:28 +0100)
committerJean Baptiste Favre <debian@jbfavre.org>
Sat, 21 May 2022 17:28:31 +0000 (18:28 +0100)
commitc23a8b4bf518275d67c52c7999c1b64b9e8b1345
tree48ed8e8f672631534e3bf95adcce1669877ce74e
parent0f3e933c655db9dc24ded1b505626f9ca9def5a4
parent0f8f0af7129b8d03888dcd11363180ab7fc081b4
trafficserver (8.1.1+ds-1.1+deb11u1) bullseye-security; urgency=high

  * Multiple CVE fixes for 8.1.x
    + CVE-2021-37147: Improper input validation vulnerability
    + CVE-2021-37148: Improper input validation vulnerability
    + CVE-2021-37149: Improper Input Validation vulnerability
    + CVE-2021-38161: Improper Authentication vulnerability in TLS origin verification
    + CVE-2021-44040: Improper Input Validation vulnerability in request line parsing
    + CVE-2021-44759: Improper Authentication vulnerability in TLS origin validation

[dgit import unpatched trafficserver 8.1.1+ds-1.1+deb11u1]
51 files changed:
debian/CONFIGURATION.Debian
debian/NEWS
debian/README.Debian
debian/README.conf-remap.Debian
debian/change_config.pl
debian/changelog
debian/control
debian/copyright
debian/docs
debian/gbp.conf
debian/not-installed
debian/patches/0001-Use-mcx16-on-x86-platforms-only.patch
debian/patches/0003-reproductible-build.patch
debian/patches/0006-fix-doc-build.patch
debian/patches/0008-fix-python-check-unused-dependencies.patch
debian/patches/0009-fix-mysql-8-build.patch
debian/patches/0011-fix-segfault.patch
debian/patches/0012-fix-spelling-checks.patch
debian/patches/0013-fix-perl-interpreter-path.patch
debian/patches/0014-use_system_yaml-cpp.patch
debian/patches/0015-as-needed-fix.patch
debian/patches/0016-fix_python_3.8.patch
debian/patches/0017-fix_sphinx_3.0.patch
debian/patches/0018-Fixes-7971.patch
debian/patches/0019-CVE_2021_37147.patch
debian/patches/0019-CVE_2021_37148.patch
debian/patches/0019-CVE_2021_37149.patch
debian/patches/0019-CVE_2021_38161.patch
debian/patches/0019-CVE_2021_44040.patch
debian/patches/0019-CVE_2021_44759.patch
debian/patches/series
debian/rules
debian/salsa-ci.yml
debian/source/format
debian/source/options
debian/trafficserver-dev.examples
debian/trafficserver-dev.install
debian/trafficserver-dev.manpages
debian/trafficserver-experimental-plugins.install
debian/trafficserver.default
debian/trafficserver.dirs
debian/trafficserver.example
debian/trafficserver.init
debian/trafficserver.install
debian/trafficserver.maintscript
debian/trafficserver.manpages
debian/trafficserver.postinst
debian/trafficserver.service
debian/trafficserver.tmpfile
debian/upstream/signing-key.asc
debian/watch