Thanks Alan. Just FYI, as of right now, none of the usual Apache Download Mirrors has a copy of trafficserver-5.1.1.tar.bz2.
However, the "Backup Sites" work just fine. I thought I'd mention it as I have no idea whether the propagation between the two is manual...or automated. Regards, Adam On Sat, Nov 1, 2014 at 6:18 PM, Alan M. Carroll <[email protected]> wrote: > Apache Traffic Server v5.1.1 Released > > The Apache Software Foundation and the Apache Traffic Server project are > pleased to announce the release of Apache Traffic Server v5.1.1! This is > our latest stable release, and is immediately available for download at: > > http://trafficserver.apache.org/downloads > > Upgrading from 5.0.x and 5.1.0 should be seamless. Upgrading from the > previous releases, 3.2.0 and later, to v5.1.1 should preserve the cache and > not require it to be cleared. More details are available at: > > https://cwiki.apache.org/confluence/display/TS/Upgrading+to+v5.0 > > This a security related release and should replace all deployed 5.1.0 > instances. The security issues involved are > > * SSL v3 - a security hole was found. As this is a very old > protocol Traffic Server was changed to not enable it by default (TS-3135). > It can still be enabled in records.config but this now requires explicit > administrator action. This is based on CVE-2014-3566. > * An error in the remap logic (TS-2677) which could potentially > enable an open relay was fixed. This is CVE-2014-3624. > > More details are available at: > > > https://cwiki.apache.org/confluence/display/TS/What's+new+in+v5.1.x > > Sincerely, > > -- The Apache Traffic Server community > -- ____________________________________________________________ Adam W. Dace <[email protected]> Phone: (815) 355-7285 Instant Messenger: AIM & Yahoo! IM - colonelforbin74 | ICQ - #39374451 Google Profile: https://plus.google.com/u/0/109309036874332290399/about
