trafficserver-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From a..@apache.org
Subject svn commit: r1636412 - in /trafficserver/site/trunk/content: downloads.en.mdtext index.html
Date Mon, 03 Nov 2014 18:10:38 GMT
Author: amc
Date: Mon Nov  3 18:10:37 2014
New Revision: 1636412

URL: http://svn.apache.org/r1636412
Log:
Better update for 5.1.1.

Submitted by:	Alan M. Carroll
Reviewed by:	Leif Hedstrom
Security:	CVE-2014-3624

Modified:
    trafficserver/site/trunk/content/downloads.en.mdtext
    trafficserver/site/trunk/content/index.html

Modified: trafficserver/site/trunk/content/downloads.en.mdtext
URL: http://svn.apache.org/viewvc/trafficserver/site/trunk/content/downloads.en.mdtext?rev=1636412&r1=1636411&r2=1636412&view=diff
==============================================================================
--- trafficserver/site/trunk/content/downloads.en.mdtext (original)
+++ trafficserver/site/trunk/content/downloads.en.mdtext Mon Nov  3 18:10:37 2014
@@ -41,7 +41,7 @@ and checksum signatures.
 
 v5.1.1 is an incremental release over 5.0.1.
 
-More details are also in the [CHANGES log](https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;a=blob_plain;f=CHANGES;hb=refs/tags/5.1.1)
and the the Jira [Release Notes](https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12324894&styleName=Html&projectId=12310963&Create=Create&atl_token=A5KQ-2QAV-T4JA-FDED%7Cceb8ed92ec8bf770f126e65e5fce4ce9335391fd%7Clout)
+More details are also in the [CHANGES log](https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;a=blob_plain;f=CHANGES;hb=refs/tags/5.1.1)
and the the Jira [Release Notes](https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12327088&styleName=Html&projectId=12310963&Create=Create&atl_token=A5KQ-2QAV-T4JA-FDED%7Cfb6e85a9e82c27f61df95aadd1538645809197e9%7Clin)
 
 # Current v4.x Release (Long Term Support) -- 4.2.2 # {#4.2.2}
 

Modified: trafficserver/site/trunk/content/index.html
URL: http://svn.apache.org/viewvc/trafficserver/site/trunk/content/index.html?rev=1636412&r1=1636411&r2=1636412&view=diff
==============================================================================
--- trafficserver/site/trunk/content/index.html (original)
+++ trafficserver/site/trunk/content/index.html Mon Nov  3 18:10:37 2014
@@ -63,11 +63,17 @@
           "http://ostatic.com/blog/guest-post-yahoos-cloud-team-open-sources-traffic-server">Traffic
           Server overview</a>.</p>
         <br>
-        <P><b>Important security announcement</b>: All versions of Traffic
-        Server prior to v5.0.1 (or v4.2.1.1) have a vulnerability related to
-        the synthetic health checks as used by traffic_cop. We urge everyone
-        to upgrade to the latest releases, either v4.2.1.1 or v5.1.1. See
-        CVE-2014-3525 for some details.
+        <P><b>Important security announcements</b>:</P>
+	<P>
+	  All versions of Traffic Server prior to v5.0.1 (or v4.2.1.1) have a vulnerability related
to
+	  the synthetic health checks as used by traffic_cop. We urge everyone
+	  to upgrade to the latest releases, either v4.2.1.1 or v5.1.1. See
+	  CVE-2014-3525 for some details.
+	</P>
+	<p>
+	  Traffic Server 5.1.0 has a security issue that can lead to acting as an open relay under
specific circumstances.
+	  We urge all deployments of 5.1.0 to upgrade to 5.1.1. See CVE-2014-3624 and TS-2677 for
more detail.
+	</p>
       </div>
     </div>
     <div class="fourcol right last">



Mime
View raw message