Merge version 8.1.1+ds-1+rpi1 and 8.1.1+ds-1.1 to produce 8.1.1+ds-1.1+rpi1 archive/raspbian/8.1.1+ds-1.1+rpi1 raspbian/8.1.1+ds-1.1+rpi1
authorRaspbian automatic forward porter <root@raspbian.org>
Sat, 7 Aug 2021 00:02:59 +0000 (01:02 +0100)
committerRaspbian automatic forward porter <root@raspbian.org>
Sat, 7 Aug 2021 00:02:59 +0000 (01:02 +0100)
1  2 
debian/changelog

index f3560147750fa3e9ce6e7f982b5022d21b3b6e29,7739c856e12290df2b9401658467a392167d625c..b92f84a315ee88f282b7683c85d28b0e428c5666
@@@ -1,9 -1,19 +1,26 @@@
- trafficserver (8.1.1+ds-1+rpi1) bullseye-staging; urgency=medium
++trafficserver (8.1.1+ds-1.1+rpi1) bullseye-staging; urgency=medium
 +
 +  [changes brought forward from 8.0.1-4+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sat, 19 Jan 2019 12:42:48 +0000]
 +  * Use -latomic on raspbian too.
 +
-  -- Raspbian forward porter <root@raspbian.org>  Sat, 12 Dec 2020 21:57:03 +0000
++ -- Raspbian forward porter <root@raspbian.org>  Sat, 07 Aug 2021 00:02:59 +0000
++
+ trafficserver (8.1.1+ds-1.1) unstable; urgency=medium
+   * Non-maintainer upload.
+   * Address CVE-2021-27577, CVE-2021-32565, CVE-2021-32566, CVE-2021-32567 and
+     CVE-2021-35474.
+     - CVE-2021-27577: Incorrect handling of url fragment leads to cache
+       poisoning
+     - CVE-2021-32565: HTTP Request Smuggling, content length with invalid
+       charters
+     - CVE-2021-32566: Specific sequence of HTTP/2 frames can cause ATS to
+       crash
+     - CVE-2021-32567: Reading HTTP/2 frames too many times
+     - CVE-2021-35474: Dynamic stack buffer overflow in cachekey plugin
+     (Closes: #990303)
+  -- Salvatore Bonaccorso <carnil@debian.org>  Thu, 15 Jul 2021 21:48:17 +0200
  
  trafficserver (8.1.1+ds-1) unstable; urgency=medium