Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in HTTP request smuggling or MITM attacks. For the oldstable distribution (buster), these problems have been fixed in version 8.0.2+ds-1+deb10u6. For the stable distribution (bullseye), these problems have been fixed in version 8.1.1+ds-1.1+deb11u1. We recommend that you upgrade your trafficserver packages. For the detailed security status of trafficserver please refer to its security tracker page at: https://security-tracker.debian.org/tracker/trafficserver
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in HTTP request smuggling or MITM attacks.
For the oldstable distribution (buster), these problems have been fixed in version 8.0.2+ds-1+deb10u6.
For the stable distribution (bullseye), these problems have been fixed in version 8.1.1+ds-1.1+deb11u1.
We recommend that you upgrade your trafficserver packages.
For the detailed security status of trafficserver please refer to its security tracker page at: https://security-tracker.debian.org/tracker/trafficserver