CVE-2020-17508

Origin: backport
Applied-upstream: https://github.com/apache/trafficserver/pull/7358
Last-Update: 2020-12-06

Last-Update: 2020-12-06
Gbp-Pq: Name 0018-CVE-2020-17508.patch

CVE-2020-9494

Origin: backport
Applied-Upstream: https://github.com/apache/trafficserver/pull/6922
Last-Update: 2020-06-25

Last-Update: 2020-06-25
Gbp-Pq: Name 0017-CVE-2020-9494.patch

CVE-2020-9481

===================================================================

Gbp-Pq: Name 0016-CVE-2020-9481.patch

Fix for CVE-2020-1944

Origin: backport
Applied-Upstream: https://github.com/apache/trafficserver/pull/6390
Last-Update: 2020-04-16

Last-Update: 2020-04-16
Gbp-Pq: Name 0016-CVE-2020-1944.patch

Fix for CVE-2019-17565

Origin: backport
Applied-Upstream: https://github.com/apache/trafficserver/pull/6398
Last-Update: 2020-04-16

Last-Update: 2020-04-16
Gbp-Pq: Name 0016-CVE-2019-17565.patch

Fix for CVE-2019-17559

Origin: backport
Applied-Upstream: https://github.com/apache/trafficserver/pull/6389
Last-Update: 2020-04-16

Last-Update: 2020-04-16
Gbp-Pq: Name 0016-CVE-2019-17559.patch

HTTP/2 fix with realloc (CVE-2019-9518)

Origin: backport, https://github.com/apache/trafficserver/pull/5850
Reviewed-by: Jean Baptiste Favre <debian@jbfavre.org>
Last-Update: 2019-08-26

Last-Update: 2019-08-26
Gbp-Pq: Name 0015-8.0.5-CVE-backport.patch

HTTP/2 rate limiting

Origin: backport, https://github.com/apache/trafficserver/pull/5822
Reviewed-by: Jean Baptiste Favre <debian@jbfavre.org>
Last-Update: 2019-08-26

 Fix for CVE-2019-9512, CVE-2019-9514, CVE-2019-9515, CVE-2019-10079
Last-Update: 2019-08-26
Gbp-Pq: Name 0015-8.0.4-CVE-backport.patch

Update compilation chain after embedded libyamlcpp removal

Origin: other
Reviewed-by: Jean Baptiste Favre <debian@jbfavre.org>
Last-Update: 2019-01-30

Last-Update: 2019-01-30
Gbp-Pq: Name 0014-use_system_yaml-cpp.patch

Fix Perl interpreter path

Reviewed-by: Jean Baptiste Favre <debian@jbfavre.org>
Last-Update: 2019-01-03

Last-Update: 2019-01-03
Gbp-Pq: Name 0013-fix-perl-interpreter-path.patch

Fix various speeling issues

Forwarded: https://github.com/apache/trafficserver/pull/4750
Applied-Upstream: https://github.com/apache/trafficserver/commit/af0ad4a1880a21743e98331855bb78e15d5406ef
Last-Update: 2019-01-03

Last-Update: 2019-01-03
Gbp-Pq: Name 0012-fix-spelling-checks.patch

Fix Segmentation fault in ShowCache::handleCacheEvent

Origin: upstream
Bug: https://github.com/apache/trafficserver/issues/4328
Applied-Upstream: https://github.com/apache/trafficserver/commit/616eb10bfc35599a2c93ff30879d584a05ddf83e
Reviewed-by: Jean Baptiste Favre <debian@jbfavre.org>
Last-Update: 2018-10-17

Last-Update: 2018-10-17
Gbp-Pq: Name 0011-fix-segfault.patch

Fix build issue with MySQL 8

Origin: other, https://bugs.launchpad.net/ubuntu/+source/trafficserver/+bug/1795362
Forwarded: https://github.com/apache/trafficserver/pull/4360
Applied-Upstream: https://github.com/apache/trafficserver/commit/05b30527974416768515506f69da338652c23260
Reviewed-by: Jean Baptiste Favre <debian@jbfavre.org>
Last-Update: 2018-10-06

The my_bool type is no longer used in MySQL source code.
Any third-party code that used this type to represent C
boolean variables should use the bool or int C type instead.
Last-Update: 2018-10-06
Gbp-Pq: Name 0009-fix-mysql-8-build.patch

Force python3 usage, add libfakeroot-sysv to blacklist

Origin: other
Last-Update: 2018-09-24

Last-Update: 2018-09-24
Gbp-Pq: Name 0008-fix-python-check-unused-dependencies.patch

Make documentation build works outside of git repository

Origin: other
Last-Update: 2019-01-03

Current documentation build requires git and curl to get some stuff from the internet
This patch aims to delete those dependencies, forcing git branch to master,
and using Debian provided plantuml instead of downloading it from apache mirror
Last-Update: 2019-01-03
Gbp-Pq: Name 0006-fix-doc-build.patch

make the build reproducible

Origin: other, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=833176
Reviewed-by: Jean Baptiste Favre <debian@jbfavre.org>
Last-Update: 2016-11-18

Last-Update: 2016-11-18
Gbp-Pq: Name 0003-reproductible-build.patch

Use -mcx16 on x86 platforms only

Gbp-Pq: Name 0001-Use-mcx16-on-x86-platforms-only.patch

trafficserver (8.0.2+ds-1+deb10u6) buster-security; urgency=high

  * Multiple CVE fixes for 8.0.x
    + CVE-2021-37147: Improper input validation vulnerability
    + CVE-2021-37148: Improper input validation vulnerability
    + CVE-2021-37149: Improper Input Validation vulnerability
    + CVE-2021-38161: Improper Authentication vulnerability in TLS origin verification
    + CVE-2021-44040: Improper Input Validation vulnerability in request line parsing
    + CVE-2021-44759: Improper Authentication vulnerability in TLS origin validation

[dgit import unpatched trafficserver 8.0.2+ds-1+deb10u6]

Import trafficserver_8.0.2+ds-1+deb10u6.debian.tar.xz

[dgit import tarball trafficserver 8.0.2+ds-1+deb10u6 trafficserver_8.0.2+ds-1+deb10u6.debian.tar.xz]

Import trafficserver_8.0.2+ds.orig.tar.xz

[dgit import orig trafficserver_8.0.2+ds.orig.tar.xz]