[ANNOUNCE] Apache Traffic Server v8.1.5 Released!

2022-08-09 Thread Evan Zelkowitz
Apache Traffic Server v8.1.5 Released The Apache Software Foundation and the Apache Traffic Server (ATS) project are pleased to announce the release of Apache Traffic Server v8.1.5! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by several large internet service

ANNOUNCE] Apache Traffic Server is vulnerable to smuggle, cache poison, and possible authorization attacks

2022-08-09 Thread Bryan Call
Description: ATS is vulnerable to smuggle, cache poison, and possible authorization attacks. CVE (8.1.x and 9.1.x): CVE-2021-37150 Protocol vs scheme mismatch CVE-2022-25763 Improper input validation on HTTP/2 headers CVE-2022-28129 Insufficient Validation of HTTP/1.x Headers CVE-2022-31780 HTTP/

[ANNOUNCE] Apache Traffic Server v9.1.3 is Released!

2022-08-09 Thread Bryan Call
Apache Traffic Server v9.1.3 Released The Apache Software Foundation and the Apache Traffic Server (ATS) project are pleased to announce the release of Apache Traffic Server v9.1.3! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by several large internet servi

[VOTE] Release Apache Traffic Server 8.1.5 (RC0)

2022-08-09 Thread Evan Zelkowitz
I've prepared a release for 8.1.5. The release notes are available at: https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr+milestone:8.1.5 or for a brief ChangeLog: https://github.com/apache/trafficserver/blob/8.1.x/CHANGELOG-8.1.5 For some details as to what’s new in 8.1.x see:

[VOTE] Release Apache Traffic Server 9.1.3 (RC0)

2022-08-09 Thread Bryan Call
I've prepared a release for 9.1.3. The release notes are available at: https://github.com/apache/trafficserver/pulls?q=is:closed+is:pr+milestone:9.1.3 or for a brief ChangeLog: https://github.com