Your message dated Sat, 24 Aug 2019 18:23:33 +0000
with message-id <e1i1ahj-000g32...@fasolo.debian.org>
and subject line Bug#934887: fixed in trafficserver 8.0.5+ds-1
has caused the Debian Bug report #934887,
regarding CVE-2019-9512 CVE-2019-9514 CVE-2019-9515
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
934887: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=934887
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: trafficserver
Severity: grave
Tags: security

ATS is affected by three of the recently announced HTTP2 issues:
https://raw.githubusercontent.com/apache/trafficserver/8.0.x/CHANGELOG-8.0.4

Cheers,
        Moritz
        

--- End Message ---
--- Begin Message ---
Source: trafficserver
Source-Version: 8.0.5+ds-1

We believe that the bug you reported is fixed in the latest version of
trafficserver, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 934...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Emanuele Rocca <e...@debian.org> (supplier of updated trafficserver package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Aug 2019 09:00:22 +0200
Source: trafficserver
Architecture: source
Version: 8.0.5+ds-1
Distribution: unstable
Urgency: medium
Maintainer: Jean Baptiste Favre <deb...@jbfavre.org>
Changed-By: Emanuele Rocca <e...@debian.org>
Closes: 934887 935314
Changes:
 trafficserver (8.0.5+ds-1) unstable; urgency=medium
 .
   * New upstream release
     - Changes introduced with 8.0.4 include fixes for CVE-2019-9512,
       CVE-2019-9514, and CVE-2019-9515. (Closes: #934887)
     - 8.0.5 fixes CVE-2019-9518 (Closes: #935314)
Checksums-Sha1:
 a516a30a2efebddee65b13e13166ce9bed24924a 2949 trafficserver_8.0.5+ds-1.dsc
 7e3cf0e83527a2f62737806e1e3f4d63cac85ae2 7826720 
trafficserver_8.0.5+ds.orig.tar.xz
 80f22c7cf2d7d2603415cfbe2b59c6366c223a02 68428 
trafficserver_8.0.5+ds-1.debian.tar.xz
 f67e5c35120466a5a7037c57470e086429b44352 14662 
trafficserver_8.0.5+ds-1_amd64.buildinfo
Checksums-Sha256:
 c4296ccd4bfa30038d88458e6a67ae6873bc7a707434c9b3bd8c584d653490a4 2949 
trafficserver_8.0.5+ds-1.dsc
 d4210cd4121669561bb3e08895ee211abdfd1b15a2cfc17910038c66ff7b98da 7826720 
trafficserver_8.0.5+ds.orig.tar.xz
 28240fce315c3c96e9f67ad8899763adc2cc554e8ce6d0bd11f15418aef8f9dd 68428 
trafficserver_8.0.5+ds-1.debian.tar.xz
 2917832dd54e19e929ecfcd020f385739576239d141eadf4606e452909465e61 14662 
trafficserver_8.0.5+ds-1_amd64.buildinfo
Files:
 63ff249767700c204a259455ed442c6d 2949 web optional trafficserver_8.0.5+ds-1.dsc
 303c59149e1a49bc627e9f137a86d8ae 7826720 web optional 
trafficserver_8.0.5+ds.orig.tar.xz
 ed797539c10636b69f9a6aeb3f02596c 68428 web optional 
trafficserver_8.0.5+ds-1.debian.tar.xz
 f7396219c25110d052c53a2dc243a784 14662 web optional 
trafficserver_8.0.5+ds-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Prhe
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to