Accepted trafficserver 8.1.7-0+deb10u1 (source) into oldoldstable
- To: debian-lts-changes@lists.debian.org, dispatch@tracker.debian.org
- Subject: Accepted trafficserver 8.1.7-0+deb10u1 (source) into oldoldstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Thu, 29 Jun 2023 20:30:20 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: trafficserver_8.1.7-0+deb10u1_source.changes
- Debian-source: trafficserver
- Debian-suite: oldoldstable
- Debian-version: 8.1.7-0+deb10u1
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.seger; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=poSOQQcmezyEuvEgIAGN/GuQ0S0BktNbGxsB2Db3CiQ=; b=bIRhUGOU3CUIcPHcXcdIPk9Jt3 sXHfcsoIQg36VwWaFvGGLlqXv2kHownj/fgwm8SkbFU0hYsFzC064ppko6qPEEb3/p9jScwRLbkW8 cSH4dKacvIH5l9wNKCKSkA310A83jAnQvQRCjAlINzmnmq7onAAfWFQ751JpP4JRXtdG9XxV3HXUk jwPah/+JjTpiOMX/TYOlOit4lA6TAiaPolx2XVyPBzdSHV7WMG1jt1tw2/W7le6QGJhKc5+JWj0VO i8LYC6iP4MRwWuHapZKhfD0zy2R7las89mtBNgWQlp71Ib3oX4BMi5bNkIXnBlaq8mdELAI8cih6d ThHXr9Cw==;
- Mail-followup-to: debian-lts@lists.debian.org
- Message-id: <E1qEyHU-009yn0-8m@seger.debian.org>
- Reply-to: debian-lts@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 29 Jun 2023 18:41:23 +0300
Source: trafficserver
Architecture: source
Version: 8.1.7-0+deb10u1
Distribution: buster-security
Urgency: medium
Maintainer: Jean Baptiste Favre <debian@jbfavre.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Changes:
trafficserver (8.1.7-0+deb10u1) buster-security; urgency=medium
.
* Non-maintainer upload by the LTS Security Team.
* New upstream release.
- CVE-2022-47184: The TRACE method can be used to disclose
network information.
- CVE-2023-30631: Configuration option to block the PUSH method
in ATS didn't work.
- CVE-2023-33933: s3_auth plugin problem with hash calculation.
Checksums-Sha1:
ed184317291768089836f5783dbe49e4e6db1052 2729 trafficserver_8.1.7-0+deb10u1.dsc
1ec1f18838d33352cdf494e96284244984d085d7 7919920 trafficserver_8.1.7.orig.tar.xz
6d4863357db01e9a6df4034bb5d50d0dff6632c2 46140 trafficserver_8.1.7-0+deb10u1.debian.tar.xz
Checksums-Sha256:
1e6269169ab5a7d78ab401a66e04c553ecb802c0d3bda6f70d3093bd557c4d95 2729 trafficserver_8.1.7-0+deb10u1.dsc
c472f50f27193de9d516ea545242b80609d05abf19b04f6e43009f4555059b5a 7919920 trafficserver_8.1.7.orig.tar.xz
7408b46e08594eeab48ba3eeaea71888339f7de2a05f69c7ba5feec5f65f305f 46140 trafficserver_8.1.7-0+deb10u1.debian.tar.xz
Files:
cd10f9fdc5e8a88dad7b2f8c32367cbc 2729 web optional trafficserver_8.1.7-0+deb10u1.dsc
3c495598c8068a3df19a19382b3b4089 7919920 web optional trafficserver_8.1.7.orig.tar.xz
de302f9d3209f984a9de8750f74ebeb2 46140 web optional trafficserver_8.1.7-0+deb10u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=Y9z0
-----END PGP SIGNATURE-----