Debian/trafficserver: high 7.5
ESI plugin does not have the limit for maximum inclusion depth, and that allows excessive memory consumption if malicious instructions are inserted. Users can use a new setting for the plugin (--max-i
Action: Upgrade trafficserver to 9.2.5+ds-0+deb12u3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.2.5+ds-0+deb12u3 | - |
Fixed versions
| 9.2.5+ds-0+deb12u3 |
Sources
published · modified · JSON