tocsin

Debian/trafficserver: critical 9.8

Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT.

Action: Upgrade trafficserver to 5.0.0-1 or later.

Affected

introducedfixedlast affected
05.0.0-1-

Fixed versions

5.0.0-1

Sources

published · modified · JSON