bryancall commented on issue #10051: URL: https://github.com/apache/trafficserver/issues/10051#issuecomment-4008594652
This was a fair question when filed -- both CVEs had just been disclosed. However, the 7.1.x branch was already end-of-life at that time (last release was 7.1.12 in January 2021), and we don't perform CVE impact analysis on unsupported branches. Both CVE-2023-30631 and CVE-2023-33933 were addressed in the supported release branches (8.1.x and 9.1.x). The currently supported releases are 9.2.x and 10.x. Closing this out given the age. Feel free to reopen or file a new issue if you have questions about a current release. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
