You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@trafficserver.apache.org by bu...@apache.org on 2012/03/22 04:04:11 UTC

svn commit: r809531 - in /websites/staging/trafficserver/trunk/content: ./ downloads.en.html index.html

Author: buildbot
Date: Thu Mar 22 03:04:11 2012
New Revision: 809531

Log:
Staging update by buildbot for tserver

Modified:
    websites/staging/trafficserver/trunk/content/   (props changed)
    websites/staging/trafficserver/trunk/content/downloads.en.html
    websites/staging/trafficserver/trunk/content/index.html

Propchange: websites/staging/trafficserver/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Thu Mar 22 03:04:11 2012
@@ -1 +1 @@
-1303610
+1303640

Modified: websites/staging/trafficserver/trunk/content/downloads.en.html
==============================================================================
--- websites/staging/trafficserver/trunk/content/downloads.en.html (original)
+++ websites/staging/trafficserver/trunk/content/downloads.en.html Thu Mar 22 03:04:11 2012
@@ -64,125 +64,96 @@ for releases containing bug fixes.</p>
 compatible signature. You can also 
 <a href="http://www.apache.org/dyn/closer.cgi/trafficserver/">browse through all releases</a> 
 and checksum signatures. </p>
-<h1 id="3.0.2">Current (stable) Release -- 3.0.2</h1>
-<p>Apache Traffic Server 3.0.1 was released on December 07, 2011.
- [<a href="http://www.apache.org/dist/trafficserver/trafficserver-3.0.2.tar.bz2.asc">PGP</a>]
- [<a href="http://www.apache.org/dist/trafficserver/trafficserver-3.0.2.tar.bz2.md5">MD5</a>]
- [<a href="http://www.apache.org/dist/trafficserver/trafficserver-3.0.2.tar.bz2.sha1">SHA1</a>] 
- [<a href="http://www.apache.org/dyn/closer.cgi/trafficserver/trafficserver-3.0.2.tar.bz2">SRC</a>] </p>
-<h2 id="3.0.2Bugs">Bugs</h2>
-<ul>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-859">TS-859</a>] - ATS requesting to origin instead to the parent server </li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-867">TS-867</a>] - PluginVC crashes with TSFetchURL </li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-882">TS-882</a>] - traffic_logstats dies when printing log </li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-883">TS-883</a>] - traffic_logstats provides conflicting help </li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-888">TS-888</a>] - SSL connections working with 2.1.5 fail with 3.0.1 and FireFox </li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-901">TS-901</a>] - Valgrind found minor leaks and uninitialized variables </li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-906">TS-906</a>] - ATS doesn't read proxy.config.http.forward.proxy_auth_to_parent </li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-916">TS-916</a>] - TSHttpIsInternalRequest() crashes if client connection is terminated prematurely </li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-927">TS-927</a>] - patch: dont use malloc.h </li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-944">TS-944</a>] - ssl.server.cert.path &amp; ssl.server.private_key.path do not work as expected </li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-967">TS-967</a>] - Traffic Server unconditionally sets compiler optimizing flags (with patch) </li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-969">TS-969</a>] - make check failing on Debian Sid and Solaris </li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1030">TS-1030</a>] - hash collation in hdrtoken_hash</li>
-</ul>
-<h2 id="3.0.2Improvement">Improvement</h2>
-<ul>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-730">TS-730</a>] - SSL needs CipherSuite control in negotiation</li>
-</ul>
-<h2 id="3.0.2NewFeature">New Feature</h2>
-<ul>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1013">TS-1013</a>] - Allow ssl_multicert.config to support CA chains per host</li>
-</ul>
-<p>The full change log is located in <a href="http://svn.apache.org/viewvc/trafficserver/traffic/branches/3.0.x/CHANGES?view=markup">/trafficserver/traffic/branches/3.0.x/CHANGES</a>. </p>
-<div class="dl">
-  <a href="http://www.apache.org/dyn/closer.cgi/trafficserver/trafficserver-3.0.2.tar.bz2">Download Source</a>
-</div>
-
-<h1 id="3.1.2">Current (developer, unstable) Release -- 3.1.2</h1>
-<p>Apache Traffic Server 3.1.2 was released on February 8, 2011.
- [<a href="http://www.apache.org/dist/trafficserver/trafficserver-3.1.2-unstable.tar.bz2.asc">PGP</a>]
- [<a href="http://www.apache.org/dist/trafficserver/trafficserver-3.1.2-unstable.tar.bz2.md5">MD5</a>]
- [<a href="http://www.apache.org/dist/trafficserver/trafficserver-3.1.2-unstable.tar.bz2.sha1">SHA1</a>]
- [<a href="http://www.apache.org/dyn/closer.cgi/trafficserver/trafficserver-3.1.2-unstable.tar.bz2">SRC</a>]</p>
-<h2 id="3.1.2Bugs">Bugs</h2>
-<ul>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-57">TS-57</a>] - Logging:  IP's being logged in text mode when binary mode enabled for logging</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-912">TS-912</a>] - TSFetchURL - poor performance</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-944">TS-944</a>] - ssl.server.cert.path &amp; ssl.server.private_key.path do not work as expected</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-949">TS-949</a>] - key-&gt;volume hash table is not consistent when a disk is marked as bad or removed due to failure</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-996">TS-996</a>] - HTTPHdr::m_host goes stale if HdrHeap::evacuate_from_str_heaps is called</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1008">TS-1008</a>] - TCP connection data isn't available from TSHttpSsn Object</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1014">TS-1014</a>] - slow log can not print logs well on 32-bit system, I changed the %d to RPI64</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1021">TS-1021</a>] - traffic_logstats fails on zwoop's machine</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1022">TS-1022</a>] - LogEntryHeader is a serialized structure but uses vague types.</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1028">TS-1028</a>] - Assert when enabling "shared origin connections" with a setting of "2"</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1029">TS-1029</a>] - DNS crash if we free the memory into system</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1030">TS-1030</a>] - hash collation in hdrtoken_hash</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1032">TS-1032</a>] - Assertion when upstream connection is established (with event handled by thread A) and immediately disconnected (handled by thread B)</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1035">TS-1035</a>] - EventProcessor::spawn_thread doesn't check that there is enough event threads and segfaults</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1037">TS-1037</a>] - Machine.cc doesn't recognize IPs properly</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1038">TS-1038</a>] - TSHttpTxnErrorBodySet() can leak memory (pt 2)</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1042">TS-1042</a>] - PATCH: correct debug message in FetchSM</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1044">TS-1044</a>] - PATCH: Fix TSVConn{Read,Write}VIOGet in UnixNetVConnection.</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1047">TS-1047</a>] - Several spelling fixes in strings</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1049">TS-1049</a>] - TS hangs (dead lock) on HTTPS POST requests</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1052">TS-1052</a>] - trafficserver restart does not work (needs to let old process die)</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1055">TS-1055</a>] - Wrong implementation of TSHttpSsnArgGet</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1056">TS-1056</a>] - Lost UA connections can show up as "400 ERR_INVALID_REQ" in logs</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1057">TS-1057</a>] - Expose internal Base64 Encoding / Decoding</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1061">TS-1061</a>] - TSHttpTxnServerReqHdrBytesGet in ./proxy/InkAPI.cc has an extra parameter (int *bytes) from the prototype in ./proxy/api/ts/ts.h.  The extra parameter needs to be removed as it is not used.</li>
+<h1 id="3.0.4">Current (stable) Release -- 3.0.4</h1>
+<p>Apache Traffic Server 3.0.4 was released on March 21, 2012.
+ [<a href="http://www.apache.org/dist/trafficserver/trafficserver-3.0.4.tar.bz2.asc">PGP</a>]
+ [<a href="http://www.apache.org/dist/trafficserver/trafficserver-3.0.4.tar.bz2.md5">MD5</a>]
+ [<a href="http://www.apache.org/dist/trafficserver/trafficserver-3.0.4.tar.bz2.sha1">SHA1</a>] 
+ [<a href="http://www.apache.org/dyn/closer.cgi/trafficserver/trafficserver-3.0.4.tar.bz2">SRC</a>] </p>
+<h2 id="3.0.4Security">Important Security Fixes</h2>
+<p>This release fixes vulnerability, <a href="https://www.cert.fi/en/reports/2012/vulnerability612884.html">CVE-2012-0256</a>,
+where a large Host: headers can potentially crash the server.
+All users of all stable releases are urged to upgrade to 3.0.4. This includes all 2.0.x and 3.0.x releases prior
+to v3.0.4</p>
+<h2 id="3.0.4Bugs">Bugs</h2>
+<ul>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-880">TS-880</a>] - Major performance problem with second request on same keep-alive connection</li>
 <li>[<a href="https://issues.apache.org/jira/browse/TS-1065">TS-1065</a>] - traffic_cop segment fault when enable TRACE_LOG_COP</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1071">TS-1071</a>] - Debug statement in FetchSM broken</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1073">TS-1073</a>] - no_dns_just_forward_to_parent configuration parameter is ignored/not used.</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1074">TS-1074</a>] - PluginVC should schedule to the local queue instead of the external queue.</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1082">TS-1082</a>] - configure always clobbers optimiser flags</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1091">TS-1091</a>] - <code>./configure CFLAGS=-w</code> causes configure script to wrongly guess style of <code>gethostbyname_r</code> on OS X (and probably other BSDs)</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1094">TS-1094</a>] - TS hangs after repeated requests from the same kept-alive connection</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1101">TS-1101</a>] - traffic_line -x doesn't seem to work</li>
-</ul>
-<h2 id="3.1.2Improvements">Improvements</h2>
-<ul>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-992">TS-992</a>] - Generic portability fixes.</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-999">TS-999</a>] - Deprecate TSUrlDestroy ?</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1039">TS-1039</a>] - PATCH: use pcre-config to find libpcre</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1040">TS-1040</a>] - PATCH: teach TSHostLookup to use const</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1041">TS-1041</a>] - PATCH: guarantee to populate sockaddr length for TSHostLookupResultAddrGet</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1046">TS-1046</a>] - Add possibility to extend tsxs command line for -Iincludes</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1077">TS-1077</a>] - HTTP ports cannot be configured for IPv6 and transparency.</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1081">TS-1081</a>] - Eliminate the additional internal copy of the "pristine" URL string</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1083">TS-1083</a>] - initial SSL next protocol negotiation support</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1096">TS-1096</a>] - readline support for traffic_shell</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1097">TS-1097</a>] - online help for traffic_shell</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1098">TS-1098</a>] - Make RC script support Amazon EC2 Linux AMI</li>
-</ul>
-<h2 id="3.1.2NewFeatures">New Features</h2>
-<ul>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-254">TS-254</a>] - Add TSEscapifyString() and TSUnescapifyString() </li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1048">TS-1048</a>] - Add TS API to enable plugins to use traffic server configuration infrastructure </li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1088">TS-1088</a>] - Allow Per-transaction Transparency (TProxy) Override</li>
-<li>[<a href="https://issues.apache.org/jira/browse/TS-1089">TS-1089</a>] - Allow Plugins to create transparent internal http connections</li>
-</ul>
-<p>The full change log is located in <a href="http://svn.apache.org/viewvc/trafficserver/traffic/trunk/CHANGES?revision=1160602&amp;view=markup">/trafficserver/traffic/trunk/CHANGES</a>. 
-The Jira release notes are also <a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310963&amp;version=12316496">available</a>. </p>
-<div class="dl">
- <a href="http://www.apache.org/dyn/closer.cgi/trafficserver/trafficserver-3.1.2-unstable.tar.bz2">Download Source</a>
-</div>
-
-<h1 id="3.0.0">Archived (stable) Release -- 3.0.1</h1>
-<p>Apache Traffic Server 3.0.1 was released on July 19, 2011.
- [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.0.1.tar.bz2.asc">PGP</a>]
- [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.0.1.tar.bz2.md5">MD5</a>]
- [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.0.1.tar.bz2.sha1">SHA1</a>]
- [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.0.1.tar.bz2">SRC</a>]</p>
-<p>The full change log is located in <a href="http://svn.apache.org/viewvc/trafficserver/traffic/branches/3.0.x/CHANGES?view=markup">/trafficserver/traffic/branches/3.0.x/CHANGES</a>. 
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1110">TS-1110</a>] - logstats incorrectly bucketizes all status codes greater than 599 as 5xx</li>
+</ul>
+<h2 id="3.0.4Improvement">Improvement</h2>
+<ul>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-948">TS-948</a>] - do not reload bad remap.config</li>
+</ul>
+<h2 id="3.0.4NewFeature">New Feature</h2>
+<p>There are no new features in this release.</p>
+<p>More details are also in the <a href="https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;a=blob;f=CHANGES;h=9fe84e12fbc75f8f5c2e56fda089622443c1fa74;hb=0f57f149b0a42798ca09e0f3ce77393a6acb0ec2">CHANGES log</a>. </p>
+<div class="dl">
+  <a href="http://www.apache.org/dyn/closer.cgi/trafficserver/trafficserver-3.0.4.tar.bz2">Download Source</a>
+</div>
+
+<h1 id="3.1.3">Current (developer, unstable) Release -- 3.1.3</h1>
+<p>Apache Traffic Server 3.1.3 was released on March 21, 2012.
+ [<a href="http://www.apache.org/dist/trafficserver/trafficserver-3.1.3-unstable.tar.bz2.asc">PGP</a>]
+ [<a href="http://www.apache.org/dist/trafficserver/trafficserver-3.1.3-unstable.tar.bz2.md5">MD5</a>]
+ [<a href="http://www.apache.org/dist/trafficserver/trafficserver-3.1.3-unstable.tar.bz2.sha1">SHA1</a>]
+ [<a href="http://www.apache.org/dyn/closer.cgi/trafficserver/trafficserver-3.1.3-unstable.tar.bz2">SRC</a>]</p>
+<h2 id="3.1.3Security">Important Security Fixes</h2>
+<p>This release fixes vulnerability, <a href="https://www.cert.fi/en/reports/2012/vulnerability612884.html">CVE-2012-0256</a>,
+where a large Host: headers can potentially crash the server.
+All users of all unstable development releases are urged to upgrade to 3.0.4. This includes all 2..x and 3.1.x releases prior
+to v3.1.3.</p>
+<h2 id="3.1.3Bugs">Bugs</h2>
+<ul>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-937">TS-937</a>] - EThread::execute still processing cancelled event</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-978">TS-978</a>] - A third cache evacuate issue</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1102">TS-1102</a>] - Cleanup obsolete debugging code</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1104">TS-1104</a>] - Build problem on solaris</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1109">TS-1109</a>] - stack dump may crash too</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1110">TS-1110</a>] - logstats incorrectly bucketizes all status codes greater than 599 as 5xx</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1111">TS-1111</a>] - crash in RangeTransform::handle_event</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1115">TS-1115</a>] - Fix build issues with Intel ICC</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1117">TS-1117</a>] - Remove TS_HAS_PURIFY macro</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1123">TS-1123</a>] - Problems building with editline/readline on OSX</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1126">TS-1126</a>] - traffic_server is unable to bind 127.0.0.1:8084 (the default mgmt port) on OSX</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1138">TS-1138</a>] - IpMap::fill does not handle singleton, then range correctly.</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1144">TS-1144</a>] - fix out of tree builds</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1145">TS-1145</a>] - clang build fixes</li>
+</ul>
+<h2 id="3.1.3Improvements">Improvements</h2>
+<ul>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-821">TS-821</a>] - memcached_remap plugin</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-995">TS-995</a>] - Change IPv6 support function names to be clearer and more compliant.</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1116">TS-1116</a>] - Fix build issues with clang (particularly on OSX)</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1122">TS-1122</a>] - Make regex_remap plugin understand redirect directives</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1133">TS-1133</a>] - Make remap max-host length configure.ac configurable</li>
+</ul>
+<h2 id="3.1.3NewFeatures">New Features</h2>
+<ul>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-841">TS-841</a>] - support TLS NextProtocol negotiation</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1002">TS-1002</a>] - log unmapped HOST when pristine_host_hdr disabled</li>
+<li>[<a href="https://issues.apache.org/jira/browse/TS-1124">TS-1124</a>] - Move a few plugins into main repo.</li>
+</ul>
+<p>More details are also in the <a href="https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;a=blob;f=CHANGES;h=9fe84e12fbc75f8f5c2e56fda089622443c1fa74;hb=0f57f149b0a42798ca09e0f3ce77393a6acb0ec2">CHANGES log</a>. 
+The Jira release notes are also <a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310963&amp;version=12317969">available</a>. </p>
+<div class="dl">
+ <a href="http://www.apache.org/dyn/closer.cgi/trafficserver/trafficserver-3.1.3-unstable.tar.bz2">Download Source</a>
+</div>
+
+<h1 id="3.0.2">Archived (stable) Release -- 3.0.2</h1>
+<p>Apache Traffic Server 3.0.2 was released on December 07, 2011.
+ [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.0.2.tar.bz2.asc">PGP</a>]
+ [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.0.2.tar.bz2.md5">MD5</a>]
+ [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.0.2.tar.bz2.sha1">SHA1</a>]
+ [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.0.2.tar.bz2">SRC</a>]</p>
+<p>More details are also in the <a href="">CHANGES log</a>.
 For details on the fixes since v2.0.0, please refer to the <a href="v2tov3bugs.html">bug list</a>. </p>
 <p><strong>Note:</strong> Upgrading from v2.0.x or v2.1.8 and earlier requires that you migrate to the
 new records.config configuration file. You should also clear all caches after upgrading
 (e.g. <code>sudo traffic_server -Cclear</code>), as well as deleting the hostdb files (<code>var/trafficserver/host.db</code>
 and <code>etc/trafficserver/internal/hostdb.config</code>).</p>
 <div class="dl">
-<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.0.0.tar.bz2">Download Source</a>
+<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.0.2.tar.bz2">Download Source</a>
 </div>
 
 <h1 id="2.0.1">Archived (stable) Release -- 2.0.1</h1>
@@ -200,13 +171,25 @@ and <code>etc/trafficserver/internal/hos
 <a href="http://archive.apache.org/dist/trafficserver/trafficserver-2.0.1.tar.bz2">Download Source</a>
 </div>
 
+<h1 id="3.1.2">Archived (developer, unstable) Release -- 3.1.2</h1>
+<p>Apache Traffic Server 3.1.2 was released on February 8, 2012.
+ [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.1.2-unstable.tar.bz2.asc">PGP</a>]
+ [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.1.2-unstable.tar.bz2.md5">MD5</a>]
+ [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.1.2-unstable.tar.bz2.sha1">SHA1</a>]
+ [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.1.2-unstable.tar.bz2">SRC</a>]</p>
+<p>More details are also in the <a href="https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;a=blob;f=CHANGES;h=b601cc7b8de241b7413006d50b31274f662c309b;hb=458454806b2e18230ec2a77d235e91d8682f651f">CHANGES log</a>.
+The Jira release notes are also <a href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310963&amp;version=12316496">available</a>.</p>
+<div class="dl">
+<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.1.2-unstable.tar.bz2">Download Source</a>
+</div>
+
 <h1 id="3.1.1">Archived (developer, unstable) Release -- 3.1.1</h1>
 <p>Apache Traffic Server 3.1.1 was released on Novemeber 18, 2011.
  [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.1.1-unstable.tar.bz2.asc">PGP</a>]
  [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.1.1-unstable.tar.bz2.md5">MD5</a>]
  [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.1.1-unstable.tar.bz2.sha1">SHA1</a>]
  [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.1.1-unstable.tar.bz2">SRC</a>]</p>
-<p>The full change log is located in <a href="http://svn.apache.org/viewvc/trafficserver/traffic/trunk/CHANGES?revision=1160602&amp;view=markup">/trafficserver/traffic/trunk/CHANGES</a>. </p>
+<p>More details are also in the <a href="https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;a=blob;f=CHANGES;h=b9f3bb5a460334a44589b4346321510e5cf3f225;hb=54a0686ee2961cf4f3d55d63810c077fc902ef7c">CHANGES log</a>.</p>
 <div class="dl">
 <a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.1.1-unstable.tar.bz2">Download Source</a>
 </div>
@@ -217,7 +200,7 @@ and <code>etc/trafficserver/internal/hos
  [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.1.0-unstable.tar.bz2.md5">MD5</a>]
  [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.1.0-unstable.tar.bz2.sha1">SHA1</a>]
  [<a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.1.0-unstable.tar.bz2">SRC</a>]</p>
-<p>The full change log is located in <a href="http://svn.apache.org/viewvc/trafficserver/traffic/trunk/CHANGES?revision=1160602&amp;view=markup">/trafficserver/traffic/trunk/CHANGES</a>. </p>
+<p>More details are also in the <a href="https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;a=blob;f=CHANGES;h=1bcde89481a6527e85c448781aa84b311e34aea1;hb=6a6a94f5668160fba6118ca08cd2dc5cdb37c542">CHANGES log</a>.</p>
 <div class="dl">
 <a href="http://archive.apache.org/dist/trafficserver/trafficserver-3.1.0-unstable.tar.bz2">Download Source</a>
 </div>

Modified: websites/staging/trafficserver/trunk/content/index.html
==============================================================================
--- websites/staging/trafficserver/trunk/content/index.html (original)
+++ websites/staging/trafficserver/trunk/content/index.html Thu Mar 22 03:04:11 2012
@@ -39,7 +39,7 @@
       <a href="http://trafficserver.apache.org/">Home</a>
       <a href="downloads">Downloads</a>
       <a href="docs">Documentation</a>
-      <a href="https://cwiki.apache.org/confluence/display/TS/Traffic+Server">Wiki</a>
+      <a href="https://cwiki.apache.org/confluence/display/TS/Apache+Traffic+Server">Wiki</a>
       <a href="https://issues.apache.org/jira/browse/TS">Issues</a>
     </div>
     <div class="fourcol last right">
@@ -57,6 +57,11 @@
         Foundation, and it is now an Apache TLP. Here's a <a href=
           "http://ostatic.com/blog/guest-post-yahoos-cloud-team-open-sources-traffic-server">Traffic
           Server overview</a>.</p>
+        <P><b>Important security announcement<b>: All versions of Traffic Server prior to v3.0.4 and
+            v3.1.3 have a vulnerability where a large Host: header can crash the server under
+            certain conditions. Everyone is encouraged to upgrade as soon as possible. For more
+            details, see <a href="https://www.cert.fi/en/reports/2012/vulnerability612884.html">CVE-2012-0256</href>.
+            New releases addressing this issue are available on the <a href="downloads">Download page</a>.
       </div> 
     </div>
     <div class="fourcol right last" id="download">
@@ -231,6 +236,8 @@
     <div class="twelvecol">
       <div id="blurbbox">
         <ul>
+          <li><b>March 21, 2012:</b> The Apache Traffic Server v3.0.4 and v3.1.3-unstable is now available on the <a href="http://www.apache.org/dyn/closer.cgi/trafficserver/">Apache mirrors</a>. These releases both address a vulnerability discovered in all previous Apache Traffic Server versions. Users of ATS are encouraged to upgrade to one of the two releases as soon as possible. For more details, see <a href="https://www.cert.fi/en/reports/2012/vulnerability612884.html">CVE-2012-0256</href>.</li>
+          <li><b>February 8, 2012:</b> The Apache Traffic Server 3.1.2-unstable is now available on the <a href="http://www.apache.org/dyn/closer.cgi/trafficserver/">Apache mirrors</a>.</li>
           <li><b>January 27, 2012:</b> The Apache Traffic community welcomes our three new committers: James Peach, Brian Geffon and Bart Wyatt!</li>
           <li><b>December 07, 2011:</b> The Apache Traffic Server 3.0.2 is now available on the <a href="http://www.apache.org/dyn/closer.cgi/trafficserver/">Apache mirrors</a>.</li>
           <li><b>November 18, 2011:</b> The Apache Traffic Server 3.1.1-unstable is now available on the <a href="http://www.apache.org/dyn/closer.cgi/trafficserver/">Apache mirrors</a>.</li>