-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 12 Aug 2022 09:16:08 +0200
Source: trafficserver
Architecture: source
Version: 8.1.5+ds-1~deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Jean Baptiste Favre <debian@jbfavre.org>
Changed-By: Jean Baptiste Favre <debian@jbfavre.org>
Changes:
trafficserver (8.1.5+ds-1~deb11u1) bullseye-security; urgency=high
.
* Update d/watch to stick to 8.1.X serie
* Update upstream gpg keys
* UPdate d/salsa-ci.yaml
* New upstream version 8.1.5+ds
* Patches refresh for 8.1.5
* Update experimental plugins list
* Multiple CVE fixes for 8.1.x
+ CVE-2021-37150: Protocol vs scheme mismatch
+ CVE-2022-25763: Improper input validation on HTTP/2 headers
+ CVE-2022-28129: Insufficient Validation of HTTP/1.x Headers
+ CVE-2022-31778: Transfer-Encoding not treated as hop-by-hop
+ CVE-2022-31779: Improper HTTP/2 scheme and method validation
+ CVE-2022-31780: HTTP/2 framing vulnerabilities
Checksums-Sha1:
1665bf91e9b16d8ea378d1518d920e7860f8863d 2880 trafficserver_8.1.5+ds-1~deb11u1.dsc
32599d588dbf1adb3eeac22efbb8974f586aa217 7897304 trafficserver_8.1.5+ds.orig.tar.xz
461d88c99e7c5a126a1eebff88564bd25dd470f1 44276 trafficserver_8.1.5+ds-1~deb11u1.debian.tar.xz
32165a45962ed83e9d901fca47f899ac951acf92 13977 trafficserver_8.1.5+ds-1~deb11u1_source.buildinfo
Checksums-Sha256:
587d662d445b7de1abae0200d1c089450116d7cfb90f5aa91b428c9841ccefc9 2880 trafficserver_8.1.5+ds-1~deb11u1.dsc
0be5fb9ed383f1da9214f1ad3772ec35cd0150c8effcd6c9ff373bae1fcc9747 7897304 trafficserver_8.1.5+ds.orig.tar.xz
6e6b12a198656495c7f102d0abbdcd00ed6aae2adabe19babc1fec06fe6ca089 44276 trafficserver_8.1.5+ds-1~deb11u1.debian.tar.xz
6334d52b96a894bdc06c8c7ec00d0237f5d2484cd97dc6fd383b7459482f52af 13977 trafficserver_8.1.5+ds-1~deb11u1_source.buildinfo
Files:
b7aa9a772176594d7dc6d5527dcd929c 2880 web optional trafficserver_8.1.5+ds-1~deb11u1.dsc
5c6c438d50178d695aa176764f41a0a1 7897304 web optional trafficserver_8.1.5+ds.orig.tar.xz
5365b3803633ce3e426701598b258e56 44276 web optional trafficserver_8.1.5+ds-1~deb11u1.debian.tar.xz
0a97b2f3d5603218204b951df7e6b2e6 13977 web optional trafficserver_8.1.5+ds-1~deb11u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEEToRbojDLTUSJBphHtN1Tas99hzcFAmL2P8BfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDRF ODQ1QkEyMzBDQjRENDQ4OTA2OTg0N0I0REQ1MzZBQ0Y3RDg3MzcACgkQtN1Tas99 hzdPcg//YzVHsfwLbe1/8lgtjmEl3yiw03bYigo+CWfRP8nYKlqz2nfxEm5IVsNE YpTujAHe80E70AD+LimuPHtwcK0AhW7G1WylUzdkP+lVqIt0U33rmipUlG8n+Nmv w1Z1qV9/J+bRIqw3k5BXGZyhuTJEhmUPBmf4M2v0njKUjjVbzB6m/2GS61bCBEE4 FvG2tcxDaxg3EK3BIhXtt0OZCcpjUWP7mO9l9XW8QI8c9AmMhy3uhvVnXo3EkXba JsZoZbLRczV+LnAFtkhh4gCjqqQv0UpBT+MpQuMM8XCARxgh/0Hob+8kX1AoOq6Q vvqilwuhnqRufq1gV/TIZBgfHpNsyGePHyCcyVUurMWJWiC7YdMSJjZN8Vu91oMS LUbTUFxJEaoBVzzT1uNxQuVWJSqzOGgjNep1MlzZlQYCHCzjbWR3kljFKzY8s21d 7JsKPx6Nb2GcF0NzE+JgpQDMAecEIJiC++N+pKW+ELUSfFvCO1/qlxpcNOAKsMCx 50RYiVVgvWNECBbmGDoXz7LcacozftoIN05TnjQfG6YvRjP1l7fpHtxjkcjfnV1q b8HKHEc5+8sVxxTZLDudms+jwSVwWBgCoF8oFpLIC5f4q7ilcJzfIOmlqjuBjxFZ z6UvoLvHbxJf6/Cp1yVCYi1FKYbt2Mjz7qOmHVQT1FYCrskafEA=
=m/d1
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)