DSA-5435: -1 trafficserver -- security update

Published Jun 21, 2023

Updated

Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in information disclosure or denial of service.

Affected Software

2 affected componentsFixes available

debian/trafficserver

9.2.5+ds-0+deb12u4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/trafficserver to a version that resolves this vulnerability.
Fixed in 9.2.5+ds-0+deb12u4

Event History

Jun 21, 2023

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which systems should be assessed for this update?

Debian systems running the trafficserver package, particularly where Apache Traffic Server is deployed as a reverse or forward proxy, should be assessed.

Which vulnerability records are associated with this advisory?

The advisory references CVE-2022-47184 and CVE-2023-30631.

DSA-5435: -1 trafficserver -- security update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems should be assessed for this update?

Which vulnerability records are associated with this advisory?

Company

Resources

Contact

Frequently Asked Questions

Which systems should be assessed for this update?

Which vulnerability records are associated with this advisory?