From: Raspbian automatic forward porter Date: Sun, 22 Jan 2023 18:24:32 +0000 (+0000) Subject: Merge version 8.0.2+ds-1+rpi1+deb10u6 and 8.0.2+ds-1+deb10u7 to produce 8.0.2+ds... X-Git-Tag: archive/raspbian/8.0.2+ds-1+rpi1+deb10u7^0 X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=3612a9683478313c8d8e470b3097417f179790ba;p=trafficserver.git Merge version 8.0.2+ds-1+rpi1+deb10u6 and 8.0.2+ds-1+deb10u7 to produce 8.0.2+ds-1+rpi1+deb10u7 --- 3612a9683478313c8d8e470b3097417f179790ba diff --cc debian/changelog index 79fc94bf,6910cf99..690207cb --- a/debian/changelog +++ b/debian/changelog @@@ -1,9 -1,13 +1,20 @@@ - trafficserver (8.0.2+ds-1+rpi1+deb10u6) buster-staging; urgency=medium ++trafficserver (8.0.2+ds-1+rpi1+deb10u7) buster-staging; urgency=medium + + [changes brought forward from 8.0.1-4+rpi1 by Peter Michael Green at Sat, 19 Jan 2019 12:42:48 +0000] + * Use -latomic on raspbian too. + - -- Raspbian forward porter Thu, 09 Jun 2022 22:05:57 +0000 ++ -- Raspbian forward porter Sun, 22 Jan 2023 18:24:32 +0000 ++ + trafficserver (8.0.2+ds-1+deb10u7) buster-security; urgency=medium + + * Non-maintainer upload by the Debian LTS Team. + * Multiple CVE fixes + + CVE-2021-37150: Protocol vs scheme mismatch + + CVE-2022-25763 Improper input validation on HTTP/2 headers + + CVE-2022-28129 Insufficient Validation of HTTP/1.x Headers + + CVE-2022-31780 HTTP/2 framing vulnerabilities + + -- Abhijith PA Sat, 29 Oct 2022 18:03:47 +0530 trafficserver (8.0.2+ds-1+deb10u6) buster-security; urgency=high