You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@trafficserver.apache.org by "Alan M. Carroll" <am...@apache.org> on 2014/11/02 00:18:11 UTC
[ANNOUNCE] Apache Traffic Server 5.1.1 is released!
Apache Traffic Server v5.1.1 Released
The Apache Software Foundation and the Apache Traffic Server project are pleased to announce the release of Apache Traffic Server v5.1.1! This is our latest stable release, and is immediately available for download at:
http://trafficserver.apache.org/downloads
Upgrading from 5.0.x and 5.1.0 should be seamless. Upgrading from the previous releases, 3.2.0 and later, to v5.1.1 should preserve the cache and not require it to be cleared. More details are available at:
https://cwiki.apache.org/confluence/display/TS/Upgrading+to+v5.0
This a security related release and should replace all deployed 5.1.0 instances. The security issues involved are
* SSL v3 - a security hole was found. As this is a very old protocol Traffic Server was changed to not enable it by default (TS-3135). It can still be enabled in records.config but this now requires explicit administrator action. This is based on CVE-2014-3566.
* An error in the remap logic (TS-2677) which could potentially enable an open relay was fixed. This is CVE-2014-3624.
More details are available at:
https://cwiki.apache.org/confluence/display/TS/What's+new+in+v5.1.x
Sincerely,
-- The Apache Traffic Server community
Re: [ANNOUNCE] Apache Traffic Server 5.1.1 is released!
Posted by "Alan M. Carroll" <am...@network-geographics.com>.
Saturday, November 1, 2014, 4:50:31 PM, you wrote:
> Thanks Alan.
> Just FYI, as of right now, none of the usual Apache Download Mirrors has a copy of trafficserver-5.1.1.tar.bz2.
> However, the "Backup Sites" work just fine. I thought I'd mention it as I have no idea whether the propagation
> between the two is manual...or automated.
Yes, there's something odd going on. I was able to see the distribution files on the primary server from one machine, after not seeing them from a different machine. If I click on the link here, on this machine, the files are there. I uploaded everything yesterday, so I thought it would have percolated through by now.
Re: [ANNOUNCE] Apache Traffic Server 5.1.1 is released!
Posted by "Adam W. Dace" <co...@gmail.com>.
Thanks Alan.
Just FYI, as of right now, none of the usual Apache Download Mirrors has a
copy of trafficserver-5.1.1.tar.bz2.
However, the "Backup Sites" work just fine. I thought I'd mention it as I
have no idea whether the propagation
between the two is manual...or automated.
Regards,
Adam
On Sat, Nov 1, 2014 at 6:18 PM, Alan M. Carroll <am...@apache.org> wrote:
> Apache Traffic Server v5.1.1 Released
>
> The Apache Software Foundation and the Apache Traffic Server project are
> pleased to announce the release of Apache Traffic Server v5.1.1! This is
> our latest stable release, and is immediately available for download at:
>
> http://trafficserver.apache.org/downloads
>
> Upgrading from 5.0.x and 5.1.0 should be seamless. Upgrading from the
> previous releases, 3.2.0 and later, to v5.1.1 should preserve the cache and
> not require it to be cleared. More details are available at:
>
> https://cwiki.apache.org/confluence/display/TS/Upgrading+to+v5.0
>
> This a security related release and should replace all deployed 5.1.0
> instances. The security issues involved are
>
> * SSL v3 - a security hole was found. As this is a very old
> protocol Traffic Server was changed to not enable it by default (TS-3135).
> It can still be enabled in records.config but this now requires explicit
> administrator action. This is based on CVE-2014-3566.
> * An error in the remap logic (TS-2677) which could potentially
> enable an open relay was fixed. This is CVE-2014-3624.
>
> More details are available at:
>
>
> https://cwiki.apache.org/confluence/display/TS/What's+new+in+v5.1.x
>
> Sincerely,
>
> -- The Apache Traffic Server community
>
--
____________________________________________________________
Adam W. Dace <co...@gmail.com>
Phone: (815) 355-7285
Instant Messenger: AIM & Yahoo! IM - colonelforbin74 | ICQ - #39374451
Google Profile: https://plus.google.com/u/0/109309036874332290399/about