From: Raspbian automatic forward porter <root@raspbian.org>
Date: Fri, 28 Jul 2023 00:00:41 +0000 (+0100)
Subject: Merge version 8.1.6+ds-1~deb10u1+rpi1 and 8.1.7-0+deb10u1 to produce 8.1.7-0+deb10u1... 
X-Git-Tag: archive/raspbian/8.1.7-0+deb10u1+rpi1^0
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=3b3985e4c81da320066048025f64fc5747b51389;p=trafficserver.git

Merge version 8.1.6+ds-1~deb10u1+rpi1 and 8.1.7-0+deb10u1 to produce 8.1.7-0+deb10u1+rpi1
---

3b3985e4c81da320066048025f64fc5747b51389
diff --cc debian/changelog
index 7104eed6,563505bf..9c8a3b0b
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,9 -1,14 +1,21 @@@
- trafficserver (8.1.6+ds-1~deb10u1+rpi1) buster-staging; urgency=medium
++trafficserver (8.1.7-0+deb10u1+rpi1) buster-staging; urgency=medium
 +
 +  [changes brought forward from 8.0.1-4+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sat, 19 Jan 2019 12:42:48 +0000]
 +  * Use -latomic on raspbian too.
 +
-  -- Raspbian forward porter <root@raspbian.org>  Fri, 12 May 2023 07:35:43 +0000
++ -- Raspbian forward porter <root@raspbian.org>  Fri, 28 Jul 2023 00:00:41 +0000
++
+ trafficserver (8.1.7-0+deb10u1) buster-security; urgency=medium
+ 
+   * Non-maintainer upload by the LTS Security Team.
+   * New upstream release.
+     - CVE-2022-47184: The TRACE method can be used to disclose
+       network information.
+     - CVE-2023-30631: Configuration option to block the PUSH method
+       in ATS didn't work.
+     - CVE-2023-33933: s3_auth plugin problem with hash calculation.
+ 
+  --  Adrian Bunk <bunk@debian.org>  Thu, 29 Jun 2023 18:41:23 +0300
  
  trafficserver (8.1.6+ds-1~deb10u1) buster-security; urgency=high