-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 21 Jun 2023 11:16:56 +0200 Source: trafficserver Binary: trafficserver trafficserver-dbgsym trafficserver-dev trafficserver-experimental-plugins trafficserver-experimental-plugins-dbgsym Architecture: amd64 Version: 8.1.7+ds-1~deb11u1 Distribution: bullseye-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Jean Baptiste Favre Description: trafficserver - fast, scalable and extensible HTTP/1.1 and HTTP/2.0 caching proxy trafficserver-dev - Apache Traffic Server Software Developers Kit (SDK) trafficserver-experimental-plugins - experimental plugins for Apache Traffic Server Closes: 1038248 Changes: trafficserver (8.1.7+ds-1~deb11u1) bullseye-security; urgency=high . * New upstream version 8.1.7+ds * Multiple CVE fixes for 8.1.x (Closes: #1038248) + CVE-2022-47184: Exposure of Sensitive Information to an Unauthorized Actor vulnerability + CVE-2023-30631: Improper Input Validation vulnerability + CVE-2023-33933: Exposure of Sensitive Information to an Unauthorized Actor vulnerability Checksums-Sha1: 09ae5f93c1a21cfa854475943d8e59292996bcf4 28979588 trafficserver-dbgsym_8.1.7+ds-1~deb11u1_amd64.deb 567d4e11c25767399f6033f21b58e9821ff1b5a4 320516 trafficserver-dev_8.1.7+ds-1~deb11u1_amd64.deb ef5a70f4bca3742ddcac25f7c410c3bbd3c9a1ca 3387512 trafficserver-experimental-plugins-dbgsym_8.1.7+ds-1~deb11u1_amd64.deb 0aad086bb3947ffe41a020b0701ed3fc0a978427 394916 trafficserver-experimental-plugins_8.1.7+ds-1~deb11u1_amd64.deb 9bd2577fabb65545bd438ef7573649021d61e5f2 15664 trafficserver_8.1.7+ds-1~deb11u1_amd64-buildd.buildinfo fce4a00f2a2a9d62afb6e02f8223ea698f8baf3b 3094324 trafficserver_8.1.7+ds-1~deb11u1_amd64.deb Checksums-Sha256: e7418c538b85b89f04da7b46da0fc7a6621503de9a01c012e3ed8fd9bc8755d0 28979588 trafficserver-dbgsym_8.1.7+ds-1~deb11u1_amd64.deb 2faadbf8516a1f280a54b0803b952ba964419a65283cfb69231493cbc84f5fbe 320516 trafficserver-dev_8.1.7+ds-1~deb11u1_amd64.deb f736b2a18edee8080fab8e410c3de79271095ccc47d71b803d4a75523dfb7b5f 3387512 trafficserver-experimental-plugins-dbgsym_8.1.7+ds-1~deb11u1_amd64.deb 3e316855b7a772f9fb7534bb34e13c4605056d80c94ff4263d0a910ba84d43f8 394916 trafficserver-experimental-plugins_8.1.7+ds-1~deb11u1_amd64.deb b63d14562415a1c58ce4840eb6b4bf4575492a1ac12547fe62e5ac98fd6c3af1 15664 trafficserver_8.1.7+ds-1~deb11u1_amd64-buildd.buildinfo 281418406751a979792de5246d965b6226fe3c3b68626f689c36a58b9c13bfc2 3094324 trafficserver_8.1.7+ds-1~deb11u1_amd64.deb Files: ad6b37f2223ef94339867c8bcaa951fe 28979588 debug optional trafficserver-dbgsym_8.1.7+ds-1~deb11u1_amd64.deb 74f7ab38c2e1ccd7afb999de76ac4154 320516 web optional trafficserver-dev_8.1.7+ds-1~deb11u1_amd64.deb 5af3c66be58fa3623d2f9d518b424540 3387512 debug optional trafficserver-experimental-plugins-dbgsym_8.1.7+ds-1~deb11u1_amd64.deb 8fa17555a5393d0204309857760bde07 394916 web optional trafficserver-experimental-plugins_8.1.7+ds-1~deb11u1_amd64.deb 284e6d1700da1ffedb43f9e8242a3ce0 15664 web optional trafficserver_8.1.7+ds-1~deb11u1_amd64-buildd.buildinfo 14e35e4151a4270e8f7be0d416faf0c2 3094324 web optional trafficserver_8.1.7+ds-1~deb11u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHWxRmfLuR591d5l2LWlxuzKfiVUFAmSS6/QACgkQLWlxuzKf iVU1Pw/8C4UiAm1ci0D4XMc2HHZykkxDettlboAev2IuPpBYcTO9YjJRWbREuj4t HuYIqQQF8MetJeXDL2T0HZVn8MYmDBsGtHozigRznXbe2BoKLeAuoycOgPK0e/PQ sCeCBruWKfubnzqihJspQ0ga3gYA7AKsk2erZ8TU1+H7WNX32AjBd3lbmdKtArDR Uq/luIuZwvOApiwOREPOl2zpJe82+Su6TJ3sOoPuJdTYnyCGXy7SttsrC3kQ8Yb2 p5HI6YRPSOqLJs7WU0uk4o5yRZ1+cB/QUrHcjQ9ztiHPK1nMf9GGgYKGblMKTetK gnwvR3DAGtJomDyCxXigTGsnaKlv5QJuXI+MgVUuvJDW31DZYq/Y1OuQE1p2GIvd JzO5BRuKsV4EBVtGhkdrejqF77R/BvZIcJxeh9Zcg+tcE/pD3fRZPTvSmC+O3O1z 8jiIoCkHFtksaXzan9QB5ssPihzjT789pDjvE8CtJN6/Ju8LufP1wTf96nQr0Ndm sYgUoHb9YyfELI70j3lKhls/s2Ub6lF8V8pfwH8eoZD4mLOUOMgHfQ6AZ2MIt9g6 2flIxM2NKxQJj+c3uCzCbARdLPCPfiQOLskzX++6kkv1QBGV3HGBGfQNs5e01P0L LBAPkrRHUZDYtS4CGyKNubhFST/b5CJfIOAxj9cHQ7yNGjHvCDk= =Dssg -----END PGP SIGNATURE-----