-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 10 Aug 2022 09:38:21 +0200 Source: trafficserver Architecture: source Version: 9.1.3+ds-1 Distribution: unstable Urgency: medium Maintainer: Jean Baptiste Favre <debian@jbfavre.org> Changed-By: Jean Baptiste Favre <debian@jbfavre.org> Changes: trafficserver (9.1.3+ds-1) unstable; urgency=medium . * New upstream version 9.1.3+ds - CVE-2021-37150 Protocol vs scheme mismatch - CVE-2022-25763 Improper input validation on HTTP/2 headers - CVE-2022-28129 Insufficient Validation of HTTP/1.x Headers - CVE-2022-31780 HTTP/2 framing vulnerabilities Checksums-Sha1: c42377f1e0c1f164d34705e15fe7bacd7521ac43 2983 trafficserver_9.1.3+ds-1.dsc 4bd9ecf33c768adb732873b25ccc0422cabaddac 8584968 trafficserver_9.1.3+ds.orig.tar.xz 75e634265169581d7d4f6945dd18812cdd34743c 35100 trafficserver_9.1.3+ds-1.debian.tar.xz 864b42de9911f9ce0de0aa407e7656d633bc44e3 13591 trafficserver_9.1.3+ds-1_source.buildinfo Checksums-Sha256: b580805d4c9e4e3d1abbc336aaca461521dbc8158d623daae6bf52d41e2b5a08 2983 trafficserver_9.1.3+ds-1.dsc 38bf2afcf1a2662d55e62eda34c06c01a3ce3e1c737516fbedd59f8e52b6d749 8584968 trafficserver_9.1.3+ds.orig.tar.xz 7c75ea19fd5018e1ddcb54801fb4acdd222d66cdd0d5b19d90fc52f4cd3164a6 35100 trafficserver_9.1.3+ds-1.debian.tar.xz 4ff224e3fb27f20e5fe24edd3489243a42f8a36d4bcac7971004b19503efa907 13591 trafficserver_9.1.3+ds-1_source.buildinfo Files: eca64e1a0edbe63e17d45bc0e512e361 2983 web optional trafficserver_9.1.3+ds-1.dsc 0d8dc5fddd1ea7ecfc0c93759f8767bb 8584968 web optional trafficserver_9.1.3+ds.orig.tar.xz 5cbb663c344f58c8e0877b29e5492d6a 35100 web optional trafficserver_9.1.3+ds-1.debian.tar.xz 891696c24676e17132650451277ed8d9 13591 web optional trafficserver_9.1.3+ds-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEToRbojDLTUSJBphHtN1Tas99hzcFAmLzfP1fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDRF ODQ1QkEyMzBDQjRENDQ4OTA2OTg0N0I0REQ1MzZBQ0Y3RDg3MzcACgkQtN1Tas99 hzfMsw//UjDCG+FjC6ZPJqjSUGwzMxc2YqWEtcPWGglDt4zhIVfCWijDeUcUySth fujTTGJHoHAm5YlwrHgvBlqYwx6uvsieBC+JSRXXcnZIhq3p82eVN4eT7O0Cd9Wk wMr0z/v7kWsZkczqBv8vJtgLQjw6f4vpucHNVECwqKZ3N/O3R0BPxr6AP8ZgP5jv FRPmScJ0Qmjg+SSO2E/z/VEq72yKOZ+WbNp6fBq7bYWMfojNaBe+ZB76f/twj9nQ 1i74b22vr/FCOvS8BV4ciU2G+paeBDkufJ6TCFM8dDpivaiqdebA/b1VKQPpWCL7 oRVrFax7YKhRTno9O7nTxeeN4UjQcdP0G6ebepzIepX9GH3N4sV4Wr13WfqC7+pr 1WL7muaesYSivq/vSzTXoUGZf7lotmw++Q1k5BWU34GyKmWzD3HF+acq8jfplV8b TgMp0NpuofqLF0RIMYCmiXIl6lQbAEmfPyLfILXeHRy7Ubq1z78an5BXdWkksiLT 41s7KCdCc3+xYaqaKWxmgKV5P81+WfvQze5feQrgBSVb6laDZK5zljFrMEOfATFz 9GwqjXx9fZlQDJrMC0RTu9NaeIJ+t1j7TR3AONPDnMYgiQ8kOtRX99Ue0Wa9zoWv ZyzOklA3opNb/csUiODZy3mlWfsJ9Q/Pgx95HeQ+XDSiqR6azuQ= =yo3w -----END PGP SIGNATURE-----