Format: 1.8 Date: Thu, 15 Jul 2021 21:48:17 +0200 Source: trafficserver Binary: trafficserver trafficserver-dev trafficserver-experimental-plugins Built-For-Profiles: noudeb Architecture: arm64 Version: 8.1.1+ds-1.1 Distribution: impish-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Salvatore Bonaccorso Description: trafficserver - fast, scalable and extensible HTTP/1.1 and HTTP/2.0 caching proxy trafficserver-dev - Apache Traffic Server Software Developers Kit (SDK) trafficserver-experimental-plugins - experimental plugins for Apache Traffic Server Closes: 990303 Changes: trafficserver (8.1.1+ds-1.1) unstable; urgency=medium . * Non-maintainer upload. * Address CVE-2021-27577, CVE-2021-32565, CVE-2021-32566, CVE-2021-32567 and CVE-2021-35474. - CVE-2021-27577: Incorrect handling of url fragment leads to cache poisoning - CVE-2021-32565: HTTP Request Smuggling, content length with invalid charters - CVE-2021-32566: Specific sequence of HTTP/2 frames can cause ATS to crash - CVE-2021-32567: Reading HTTP/2 frames too many times - CVE-2021-35474: Dynamic stack buffer overflow in cachekey plugin (Closes: #990303) Checksums-Sha1: 88edd22485a181b86071e02597c6b7201ffd9862 22679840 trafficserver-dbgsym_8.1.1+ds-1.1_arm64.ddeb e30cd699146e00ae3f6bd52ff712a8a66f589ef3 309982 trafficserver-dev_8.1.1+ds-1.1_arm64.deb 0958400fec2c266575f0ebbc5725ea69079deff5 2944670 trafficserver-experimental-plugins-dbgsym_8.1.1+ds-1.1_arm64.ddeb a8f0fcab3fed42f0e89ae101ce88277a8326b0fd 377384 trafficserver-experimental-plugins_8.1.1+ds-1.1_arm64.deb e2d9b15aae2b347015a12a4fcac743aa71ebdcb8 15462 trafficserver_8.1.1+ds-1.1_arm64.buildinfo 1197376c2d7196cefa9e0cce6d6d70b3a8a5a5bd 3167802 trafficserver_8.1.1+ds-1.1_arm64.deb Checksums-Sha256: 1c9945f952fa853893d7216bf0bc3566e51303d248d91a218602ae7168d110dc 22679840 trafficserver-dbgsym_8.1.1+ds-1.1_arm64.ddeb 271f3aa34895e6f2b8e1cedcde04afd2684968e30542d749da8a8b70e30fade1 309982 trafficserver-dev_8.1.1+ds-1.1_arm64.deb 57bef66e388968fa1a752d36abcf6696bb0777554c25d041b153aa23d24fa8f0 2944670 trafficserver-experimental-plugins-dbgsym_8.1.1+ds-1.1_arm64.ddeb 713a9f1bf88eb5a1cf96a68c0f0b87f6921dd96e26cb5afc56fcebb0f81ad1f9 377384 trafficserver-experimental-plugins_8.1.1+ds-1.1_arm64.deb 6003e60d2e909046c162adc22e117201e6cdbf7ce8ca2e457e405a6090aae4a7 15462 trafficserver_8.1.1+ds-1.1_arm64.buildinfo a25a076760a2a7db6f9e72cbaf50ca8f7ef9e59c4bddac67b68986048037aed4 3167802 trafficserver_8.1.1+ds-1.1_arm64.deb Files: 65f4194a10c9713d482dc819b4b3d93e 22679840 debug optional trafficserver-dbgsym_8.1.1+ds-1.1_arm64.ddeb 9120851f5b7ac072701804550169927e 309982 web optional trafficserver-dev_8.1.1+ds-1.1_arm64.deb 6ba47ab6ac833ee8e03588440f18680a 2944670 debug optional trafficserver-experimental-plugins-dbgsym_8.1.1+ds-1.1_arm64.ddeb e942b603596f823cf20b6746cfe3e0eb 377384 web optional trafficserver-experimental-plugins_8.1.1+ds-1.1_arm64.deb 6a2dbe5b43c383b6bd3924eec15960b6 15462 web optional trafficserver_8.1.1+ds-1.1_arm64.buildinfo 707703c830b431a7dea6af5fb83a797f 3167802 web optional trafficserver_8.1.1+ds-1.1_arm64.deb