-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 05 Oct 2016 00:16:09 +0800 Source: trafficserver Binary: trafficserver trafficserver-experimental-plugins trafficserver-dev Architecture: source amd64 Version: 6.2.0-1~bpo8+1 Distribution: jessie-backports Urgency: high Maintainer: Arno Töll <arno@debian.org> Changed-By: Aron Xu <aron@debian.org> Description: trafficserver - fast, scalable and extensible HTTP/1.1 compliant caching proxy se trafficserver-dev - Apache Traffic Server Software Developers Kit (SDK) trafficserver-experimental-plugins - experimental plugins for Apache Traffic Server Closes: 609285 622800 632546 633192 636338 667396 687698 691179 701427 711530 715134 733377 737510 743395 743584 750807 754134 754808 767287 770353 778148 805124 Changes: trafficserver (6.2.0-1~bpo8+1) jessie-backports; urgency=medium . * Rebuild for jessie-backports. * Require libssl-dev (>= 1.0.2j-1~) . trafficserver (6.2.0-1) unstable; urgency=medium . * Add upstream gpg keys for uscan pgpsigurlmangle option * Imported Upstream version 6.2.0 * Patch refresh for 6.2.0 * Update trafficserver manpages list * Update trafficserver install list * Update trafficserver-experimental-plugins install list * Update build dependencies (Add libmariadbclient-dev in experimental) * Bump standards version . trafficserver (6.1.1-1) unstable; urgency=medium . * Imported Upstream version 6.1.1 * Update d/watch for gpg signature check . trafficserver (6.1.0-1) unstable; urgency=medium . * New upstream release * Use -mcx16 on x86 platforms only (Closes: #805124) . trafficserver (6.0.0-3) unstable; urgency=medium . * Update d/NEWS & d/README.Debian with 32-bit upstream support drop . trafficserver (6.0.0-2) unstable; urgency=medium . * Re-enable 32-bit builds * Add some optional build dependencies * Use -O3 by default . trafficserver (6.0.0-1) unstable; urgency=medium . [ Aron Xu ] * Avoid possible-missing-colon-in-closes . [ Jean Baptiste Favre ] * Imported Upstream version 6.0.0 * Update experimental plugins list - Remove channel_stats - Add cache promote cache_promote.so - Add cache ranage request cache_range_requests.so - Add mp4 streaming media mp4.so - Add Stream editor stream_editor.so . trafficserver (5.3.1-1) unstable; urgency=medium . [ Arno Töll ] * Add proxy.config.admin.user_id setting . [ Aron Xu ] * Add myself back to Uploaders * Use dh compat 9 . [ Jean Baptiste Favre ] * Imported Upstream version 5.3.1 * Removed patch for TS-3632 (merged upstream) * Upstream changes allow ftbfs with GCC-5 (Closes: #778148) . trafficserver (5.3.0-2) unstable; urgency=medium . * Avoid installing tslua.so on archs built without LuaJIT (Closes: #770353) . trafficserver (5.3.0-1) unstable; urgency=medium . * Imported Upstream version 5.3.0 - CVE-2014-10022: remote DoS * Remove fix_TS3316_i386_build patch * Fix traffic_wccp build, missing OpenSSL symbol * Add experimental plugin generator * Format patch for TS-3632 * Update Uploader field in d/control . trafficserver (5.2.0-2) unstable; urgency=medium . * Disable LuaJIT for arm64 . trafficserver (5.2.0-1) unstable; urgency=medium . [ Jean Baptiste Favre ] * New upstream release. * Add support for following experimental modules: - epic - header_normalize - mysql_remap - ssl_cert_loader - sslheaders * Remove missing file related to removed traffic_shell * Backport patch for TS-3316 to solve i386 build issue * Fix misconfigured call to dh_makeshlibs (used system dir instead of temporary build one) . [ Aron Xu ] * Enable all hardening features. * Update copyright file. . trafficserver (5.1.1-1) unstable; urgency=medium . * New upstream release. This release includes fixes for these security related vulnerabilities: - CVE-2014-3566: Do not enable SSL3 by default - CVE-2014-3624: Ensure remap requests are properly tunneled using CONNECT requests to avoid an open relay * Add support for ppc64el, patch merged upstream (Closes: #754134, #754808) * Fix "ftbfs on kfreebsd" by conditionally building healthchecks.so on Linux only. Patch supplied by Steven Chamberlain, thanks (Closes: #767287) . trafficserver (5.1.0-1) unstable; urgency=medium . * New upstream release * Bump standards version to 3.9.6 (no changes needed) . [Jean Baptiste Favre] * Add a debug package with debug symbols for those who need it. * Split out experimental trafficserver plugins into a separate package so that users are aware of their experimental character before using them. * Add a libhwloc b-d so that ATS has a better idea about the underlying hardware it runs at to improve the runtime performance . trafficserver (5.0.1-1) unstable; urgency=medium . * New upstream release including a fix for CVE-2014-3525 that allowed attackers by special crafted packets to obtain privileges for services bound to localhost . trafficserver (5.0.0-1) unstable; urgency=medium . * Acknowledge previous NMUs, thanks to Anibal Monsalve Salazar for coordination. * New upstream version. Patch changes: + drop 0001-TS-1821.patch: released upstream in 5.0.0 + drop 0001-TS-2454-Fix-undefined-reference-to-__sync_fetch_and_.patch: released upstream in 4.2 + drop add-mips-support.patch: released upstream in 5.0.0 + drop pthread_setname_np.patch: This was a Debian specific issue which is being worked around in eglibc's commit r5460. * Add "support for mips64": merged upstream (Closes: #750807) * Build with dh-autoreconf to avoid build time issues with Automake 1.13 which is not in Debian yet. . trafficserver (4.1.2-1.2) unstable; urgency=medium . * Non-maintainer upload. * Add missing prototype for pthread_setname_np() Add pthread_setname_np.patch Patch by Petr Salinger Closes: #743584 . trafficserver (4.1.2-1.1) unstable; urgency=medium . * Non-maintainer upload. * Fix undefined reference to `__sync_fetch_and_sub_8' on ARM 32bit Add 0001-TS-2454-Fix-undefined-reference-to-__sync_fetch_and_.patch from https://issues.apache.org/jira/browse/TS-2454 Patch by Yunkai Zhang * Add support for MIPS Add add-mips-support.patch Submitted: https://issues.apache.org/jira/browse/TS-2687 Merged: https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;h=2f81790 Patch by Dejan Latinovic Closes: 743395 * Build-depend on libboost-dev Patch by Dejan Latinovic Closes: #737510 . trafficserver (4.1.2-1) unstable; urgency=medium . * Merge the experimental branch of trafficserver to unstable * New upstram release (Closes: #711530, #733377) + Refresh 0001-TS-1821.patch until it is fixed upstream + Don't run autoreconf anymore, we do not need it anymore + build depend on libaio-dev to support AIO on Linux systems * Push standards version . trafficserver (3.3.2-1) experimental; urgency=low . [ Arno Töll ] * Drop --with-arg-max from configure * Update changelog in view of the new upstream version . [ Aron Xu ] * Imported Upstream version 3.3.2 * Drop patch for enabling experimental plugins * Add liblua5.1-dev and liboost1.53-dev to B-D * Try on all archs for experimental builds * Permit parallel building * Fix typo in dep5 copyright file * Do not install staticly linked library * Enable Linux native AIO support for linux-any * Enable reclaimable freelist . trafficserver (3.3.0+git20121208-0exp1) experimental; urgency=low . * Upstream git snapshot. * Enable most of experimental plugins, install related libraries. * Run dh_autoreconf. * Make dh_auto_test errors non-fatal. . trafficserver (3.3.0-1) experimental; urgency=low . * Upload upstream development release to experimental. . trafficserver (3.2.5-1) unstable; urgency=low . * New upstream release + Fix FTBFS on ARM (Closes: #691179) + Fix FTBS with gcc 4.8 (Closes: #701427) * Promote trafficserver to depend for trafficserver-dev to fix a broken library symlink. The library is not required for all users, but those who need it don't need to install it manually anymore (Closes: #715134) . trafficserver (3.2.4-1) unstable; urgency=low . * New upstream release + Delete upstream's .gitignore file in our source tree * Switch packaging repository to Git. + Add gbp.conf file for those using git-buildpackage * Fix "Upgrade fails if purging of cache fails" by not dying in a fire when the postinst fails to purge the cache (Closes: #687698) * Drop --with-arg-max from ./configure, it's not needed anymore. . trafficserver (3.2.0-1) unstable; urgency=low . * New upstream release + If you are using SSL or HTTP filtering, please update your configuration. proxy.config.http.quick_filter.mask and proxy.config.ssl.server.cert.filename is not recognized anymore. Please use ip_allow.config and ssl_multicert.config respectively instead. There is no automated migration for this in Debian, as this affects your site-specific configuration files. + See https://cwiki.apache.org/confluence/display/TS/Upgrading+to+3.2 for full upgrade instructions. * Upstream decided to ship more plug-ins with the trafficserver core distribution. These are all bundled into the main package now. Therefore, the trafficserver-plugin-conf-remap package is not provided anymore. * Update the default configuration file to ship with more moderate values for the log configuration. * Now do start ATS by default for fresh installations. The default out-of-the box configuration is much more secure than past defaults. * Purge the host and data cache on upgrades * Let's welcome Aron Xu to the Uploaders of Trafficserver. Hi Aron! :) . trafficserver (3.0.5-1) unstable; urgency=low . * New upstream release. * No kudos for the previous hostile NMU, but include the changelog to denote this upload does not introduce a regression. * Update my maintainer address * Make the init script look much better when using fancy outputs. * Fix "status" output of the init script * Remove "DM-Upload-Allowed". I don't need that flag anymore. . trafficserver (3.0.4-1.1) unstable; urgency=low . * Non maintainer upload * Fix build failure with GCC 4.7. Closes: #667396. . trafficserver (3.0.4-1) unstable; urgency=high . * New upstream release + Fix CVE-2012-0256: A request with a very large Host header caused ATS to crash. * Setting urgency to high because of security updates * Push standards to 3.9.3 - no further changes * Stilistic adaptions in debian/copyright, but not content changes * Remove cluster interface warning from README.Configuration. ATS now binds on lo by default . trafficserver (3.0.2-1) unstable; urgency=low . * New upstream release + Includes former Debian specific patch which makes sure the upstream configure script does not override any -O flags passed by the user anymore. * Adapt to dpkg 1.16.1 API changes regarding build flags. This enables hardening build flags. This means, trafficserver is now being built with -fstack-protector and other security related build flags. * Add dpkg-dev (>= 1.16.1~) to build-depends to make sure our buildflags are properly supported. That's guaranteed for Testing, but might be helpful to know for backporters. * Fix several issues in the DEP-5 syntax. Unfortunately there is no way to express that a file is subject to different license agreements so far. * Do not install the upstream changelog twice anymore * Finally run regression checks again, now as build failures are sorted out. . trafficserver (3.0.1-2) unstable; urgency=low . * Fix "please add armhf to the arch list" - add armhf to the list of supported architectures. Thanks Konstantinos Margaritis for the hint (Closes: #636338) * Remove IA64 from the list of supported architectures. The upgrade to the gcc 4.6 toolchain disclosed portability issues with it, which caused the resul- ting binary package to produce no-op code in some functions. . trafficserver (3.0.1-1) unstable; urgency=low . * New upstream release. Fixes several important issues which caused `traffic_cop' and `traffic_server' to crash. * Fix "FTBFS with ld --as-needed" re-order libraries upon linkage, patch committed upstream. Thanks Ilya Barygin (Closes: #632546) * Fix "trafficserver: Getting rid of unneeded *.la / emptying dependency_libs", remove *.la files from the installation target completely (Closes: #633192) * Set "DM-Upload-Allowed: yes" in agreement with Asheesh Laroia <paulproteus{at}debian.org> . trafficserver (3.0.0-1) unstable; urgency=low . * New upstream release. Major changes (since 2.1.9): + `traffic_server' won't crash anymore when using non-existent plugin in remap rule + Don't cache HTTP 401, 303 and 407 error responses anymore, when negative caching is enabled. * Re-enable kfreebsd support, it was accidentally not available in 2.1.9-unstable-1 because of non installable dependencies, as libcap-dev is installable (and required) on Linux only * debian/rules: + Simplify dh_auto_configure flags (upstream incorporated our build layout) + Enable WCCP (Web Cache Communication Protocol; Linux only) * debian/control: + Add flex and bison to build dependencies, both are required for WCCP (Linux only) . trafficserver (2.1.9-unstable-1) unstable; urgency=low . * New upstream release. Major features (since 2.1.8): + Bring back support for $DESTDIR and "make check" which makes Debian patches obsolete + Allow larger working sets than 512G + Disable cluster autodiscovery when cluster mode is disabled + Cleanup `records.config' + Disable SSLv2 by default * debian/control: Add build dependency to libcap-dev, because when running traffic_server standalone, it is unable to bind restricted ports otherwise (Upstream: TS-804) * debian/rules: + Remove override for dh_clean, but put options to debian/source/options instead + Remove DH_OPTIONS (unused anyway) * Source package: Minor change to improving package quality and usability (i.e. grammar, verbosity of comments) * Make the init script more robust * Base the origin of the package source on the untouched upstream tarball, instead of the versioned SVN branch. * Bring back IA64 support, this time actually working (upstream merged my patch TS-783) * Remove patch `build-quirks.patch'. Changes have been committed upstream by now. . trafficserver (2.1.8-unstable-1) unstable; urgency=low . * New upstream release. Major features (since 2.1.5): + Many bug fixes (none reported in Debian's BTS) + Set source address for origin Servers + Major API changes for the SDK + Provide traffic_logstats + traffic_shell does not hang anymore on any command * Fix "FTBFS on architectures not supported upstream": (Closes: #622800) + Don't execute regression checks for now (fixes x86) + Upstream merges a Debian patch originally for 2.1.7 which enables kFreeBSD support (originally provided by myself) + Restrict Architectures (drop S390, IA64, MIPS[EL], PPC, SPARC) * Remove ts-ui-disable-conf.patch (applied upstream) * Update `build-quirks.patch' to make TS handle $DESTDIR correctly (upstream: TS-759) * Remove .deps from SDK binary package examples (they were incidentally included before). * Fix permissions for /var/cache/trafficserver in postinst * Bump standards to 3.9.2, depend on debhelper 8.0, adapt VCS links * Simplify debian/rules . trafficserver (2.1.5-unstable-1) unstable; urgency=low . * Initial release (Closes: #609285) * Added some configuration and informational hints * New upstream release. Major features: + Better AMD64 support + Override configuration per transaction + IPv6 + Support ARM architectures + SDK-API changes * Differences to upstream version: + Ship some documentation. Well, really a few hints + Split source into three packages (core, plug-in, SDK) + Ship our own init script Checksums-Sha1: 30f12d7f5d09d8ff20acbdcb4124c6e9608a7272 2207 trafficserver_6.2.0-1~bpo8+1.dsc 7c3ee8c0ee1da29ed30d2555aaf165fafb291c0a 564248 trafficserver_6.2.0-1~bpo8+1.debian.tar.xz f7261238d99f6f97ac07ac9aa10da207c6219f1e 3068776 trafficserver_6.2.0-1~bpo8+1_amd64.deb 1df147d75f9ef087f15907af14ddcfd437f7f7ca 403538 trafficserver-experimental-plugins_6.2.0-1~bpo8+1_amd64.deb 1d3bc3be4ff219efd6a2c32fea33b62efc5b9694 709486 trafficserver-dev_6.2.0-1~bpo8+1_amd64.deb Checksums-Sha256: 6b48f86d00a91bb909b3d501ba9b7225de8b1d890cd987fe49f6708ad06ebc21 2207 trafficserver_6.2.0-1~bpo8+1.dsc e880fa7ac8a034d6791fc5fbf31ad196c67acef074883e7af4b161e8b6557005 564248 trafficserver_6.2.0-1~bpo8+1.debian.tar.xz c1c228cf142e964068beb3dccf874c920d2a7409942f0fd489dca51cf683b4ad 3068776 trafficserver_6.2.0-1~bpo8+1_amd64.deb 6bda37f38de354d7dd754f33ab10a79bbffdc48323e78439c051b66d316327ba 403538 trafficserver-experimental-plugins_6.2.0-1~bpo8+1_amd64.deb 658aaffef6bdb24d01ddbadc05f990f149d7727ff402f8317311b14430fcd7d3 709486 trafficserver-dev_6.2.0-1~bpo8+1_amd64.deb Files: f46a7495e0cc79165a6289ac016cd150 2207 web optional trafficserver_6.2.0-1~bpo8+1.dsc 763592c8708cd32c31ef668d0d2613b4 564248 web optional trafficserver_6.2.0-1~bpo8+1.debian.tar.xz 9f7280241f2855824f49bbf835e9536f 3068776 web optional trafficserver_6.2.0-1~bpo8+1_amd64.deb 0a62b97d4f3ead4ef1731978e51cdae5 403538 web optional trafficserver-experimental-plugins_6.2.0-1~bpo8+1_amd64.deb 16026388d8efa84136e3193cfacc3b5a 709486 web optional trafficserver-dev_6.2.0-1~bpo8+1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJX89kDAAoJEPbsVcVkKA0e1GcIAJ2noA4Xg9hr9xEIt5xcYTfD dWKoOEd6GCWADJnMuBhiYtNM+qYZowL4OrFV4160b7iWQX0eO8hkBlYSJbzvhes/ gZF5FrsCSztvSxKYX9rezhRbuh5DhQRV8FtrcFd1mBUEFqILFTG5a9eQ4K+qvFBY 2wc1v5/4E7u+F2kr/Wook104CU1S2r+hLPp8297ZEQ27WwSKLdBJ0oMBsi1/J/NU k6ubH/q8DIWX/mXJMQpRWVA5HB8Q+2e2Yrdevt4Mg0FxrXofyLJ4o9fTnMz4TwUT JW7odybjs3Fdp+kbdSIdpj52Uy8MgPNtVXP50ThhzRj66rJL8czA8nIwqG4GNRE= =JzIa -----END PGP SIGNATURE-----
