[GitHub] [trafficserver-site] masaori335 opened a new pull request #1: Replace HTTP/2.0 with HTTP/2

2020-12-02 Thread GitBox
masaori335 opened a new pull request #1: URL: https://github.com/apache/trafficserver-site/pull/1 This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL a

Re: [E] [VOTE] Release Apache Traffic Server 9.0.0 (RC0)

2020-12-02 Thread Susan Hinrichs
The analysis of this crash is in https://github.com/apache/trafficserver/issues/7338. On Wed, Dec 2, 2020 at 12:44 PM Leif Hedstrom wrote: > > > > On Dec 2, 2020, at 10:01 AM, Susan Hinrichs > wrote: > > > > -1 > > > > Concern about the second PR that Masaori identified. The original PR > caus

[ANNOUNCE] Apache Traffic Server ESI plugin has a memory disclosure vulnerability

2020-12-02 Thread Bryan Call
Description: The ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please upgrade. CVE: CVE-2020-17508 Vendor: The Apache Software Foundation Version Affected: ATS 6.0.0 to 6.2.3 ATS 7.0.0 to 7.1.11 ATS 8.0.0 to 8.1.0 Mitigation: 6.x users should upgrade to 7

[ANNOUNCE] Apache Traffic Server negative cache option is vulnerable to a cache poisoning attack

2020-12-02 Thread Bryan Call
Description: ATS negative cache option is vulnerable to a cache poisoning attack. If you have this option enabled, please upgrade or disable this feature. CVE: CVE-2020-17509 Vendor: The Apache Software Foundation Version Affected: ATS 6.0.0 to 6.2.3 ATS 7.0.0 to 7.1.10 ATS 8.0.0 to 8.0.7 Mit

[ANNOUNCE] Apache Traffic Server 8.1.1 and 7.1.12 are Released

2020-12-02 Thread Bryan Call
Apache Traffic Server 8.1.1 and 7.1.12 are Released The Apache Software Foundation and the Apache Traffic Server (ATS) Project are pleased to announce the release of Apache Traffic Server 8.1.1 and 7.1.12! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by sev

Re: [VOTE] Release Apache Traffic Server 8.1.1 (RC0)

2020-12-02 Thread Bryan Call
The vote passed with 3 +1 binding votes. I will be creating the final release today and making announcements. -Bryan > On Dec 2, 2020, at 8:03 AM, Randall Meyer wrote: > > +1 > On Tuesday, December 1, 2020, 01:21:11 PM PST, Bryan Call > wrote: > > > I've prepared a release for 8.1.1. Th

Re: [VOTE] Release Apache Traffic Server 7.1.12 (RC0)

2020-12-02 Thread Bryan Call
The vote passed with 3 +1 binding votes. I will be creating the final release today and making announcements. -Bryan > On Dec 2, 2020, at 10:19 AM, Randall Meyer > wrote: > > +1 > On Tuesday, December 1, 2020, 01:21:21 PM PST, Bryan Call > wrote: > > I've prepared a release for 7.1

Re: [E] [VOTE] Release Apache Traffic Server 9.0.0 (RC0)

2020-12-02 Thread Leif Hedstrom
> On Dec 2, 2020, at 10:01 AM, Susan Hinrichs wrote: > > -1 > > Concern about the second PR that Masaori identified. The original PR caused > asserts with a debug build.. I am testing another fix to this in production. > Looking good so far. I will update the PR shortly. > > Without th

Re: [VOTE] Release Apache Traffic Server 7.1.12 (RC0)

2020-12-02 Thread Randall Meyer
+1 On Tuesday, December 1, 2020, 01:21:21 PM PST, Bryan Call wrote: I've prepared a release for 7.1.12.  The release notes for 7.1.12 are available at: https://github.com/apache/trafficserver/pulls?q=is%3Aclosed+is%3Apr+milestone%3A7.1.12 or for a brief ChangeLog: https://github

Re: [E] Re: [VOTE] Release Apache Traffic Server 9.0.0 (RC0)

2020-12-02 Thread Susan Hinrichs
-1 Concern about the second PR that Masaori identified. The original PR caused asserts with a debug build.. I am testing another fix to this in production. Looking good so far. I will update the PR shortly. Without this patch, the 9.0.x build crashes on a production machine within an hour. 2

Re: [VOTE] Release Apache Traffic Server 8.1.1 (RC0)

2020-12-02 Thread Randall Meyer
+1 On Tuesday, December 1, 2020, 01:21:11 PM PST, Bryan Call wrote: I've prepared a release for 8.1.1.  The release notes for 8.1.1 are available at:     https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr+milestone:8.1.1