trafficserver-9/9.2.4 package update

[octo-sts]

[github-actions]

Package trafficserver-9: Click to expand/collapse

Package trafficserver-9:

.PKGINFO metadata:

  (
  	"""
  	# Generated by melange
  	pkgname = trafficserver-9
- 	pkgver = 9.2.3-r0
+ 	pkgver = 9.2.4-r0
  	arch = x86_64
- 	size = 18177639
+ 	size = 18188807
  	origin = trafficserver-9
  	pkgdesc = Apache Traffic Server™ is a fast, scalable and extensible HTTP/1.1 and HTTP/2 compliant caching proxy server.
  	url = 
- 	commit = 8d2a04752fdb6161ebfd98a4c6e3cda069d6b512
- 	builddate = 1717869366
+ 	commit = 896fb62cb1c59aaf0ec0c78cab7a7bc3d5be1b49
  	license = Apache-2.0
  	depend = so:ld-linux-x86-64.so.2
  	... // 7 identical lines
  	depend = so:libstdc++.so.6
  	depend = so:libz.so.1
- 	provides = cmd:traffic_cache_tool=9.2.3-r0
- 	provides = cmd:traffic_crashlog=9.2.3-r0
- 	provides = cmd:traffic_ctl=9.2.3-r0
- 	provides = cmd:traffic_layout=9.2.3-r0
- 	provides = cmd:traffic_logcat=9.2.3-r0
- 	provides = cmd:traffic_logstats=9.2.3-r0
- 	provides = cmd:traffic_manager=9.2.3-r0
- 	provides = cmd:traffic_server=9.2.3-r0
- 	provides = cmd:traffic_via=9.2.3-r0
- 	provides = cmd:trafficserver=9.2.3-r0
- 	provides = cmd:tspush=9.2.3-r0
- 	provides = cmd:tsxs=9.2.3-r0
- 	provides = pc:trafficserver=9.2.3
+ 	provides = cmd:traffic_cache_tool=9.2.4-r0
+ 	provides = cmd:traffic_crashlog=9.2.4-r0
+ 	provides = cmd:traffic_ctl=9.2.4-r0
+ 	provides = cmd:traffic_layout=9.2.4-r0
+ 	provides = cmd:traffic_logcat=9.2.4-r0
+ 	provides = cmd:traffic_logstats=9.2.4-r0
+ 	provides = cmd:traffic_manager=9.2.4-r0
+ 	provides = cmd:traffic_server=9.2.4-r0
+ 	provides = cmd:traffic_via=9.2.4-r0
+ 	provides = cmd:trafficserver=9.2.4-r0
+ 	provides = cmd:tspush=9.2.4-r0
+ 	provides = cmd:tsxs=9.2.4-r0
+ 	provides = pc:trafficserver=9.2.4
  	... // 40 identical, 1 removed, and 1 inserted lines
  	"""
  )

Added: /usr/lib/libtscore.so.9.2.4
Added: /usr/lib/libtscppapi.so.9.2.4
Added: /usr/lib/libtscpputil.so.9.2.4
Added: /usr/lib/libtsmgmt.so.9.2.4
Modified: /etc/trafficserver-release
Modified: /usr/bin/traffic_cache_tool
Modified: /usr/bin/traffic_crashlog
Modified: /usr/bin/traffic_ctl
Modified: /usr/bin/traffic_layout
Modified: /usr/bin/traffic_logcat
Modified: /usr/bin/traffic_logstats
Modified: /usr/bin/traffic_manager
Modified: /usr/bin/traffic_server
Modified: /usr/bin/traffic_via
Modified: /usr/bin/trafficserver
Modified: /usr/include/ts/apidefs.h
Modified: /usr/lib/perl5/Apache/TS.pm
Modified: /usr/lib/perl5/x86_64-linux-thread-multi/perllocal.pod
Modified: /usr/lib/pkgconfig/trafficserver.pc
Modified: /usr/libexec/trafficserver/header_rewrite.so
Modified: /usr/libexec/trafficserver/s3_auth.so
Modified: /usr/share/man/man3/Apache::TS.3pm
Modified: /usr/share/man/man3/Apache::TS::AdminClient.3pm
Modified: /usr/share/man/man3/Apache::TS::Config::Records.3pm
Deleted: /usr/lib/libtscore.so.9.2.3
Deleted: /usr/lib/libtscppapi.so.9.2.3
Deleted: /usr/lib/libtscpputil.so.9.2.3
Deleted: /usr/lib/libtsmgmt.so.9.2.3

bincapz found differences: Click to expand/collapse

Deleted: trafficserver-9/usr/lib/libtscore.so.9.2.3 [⚠️ MEDIUM]

RISK	KEY	DESCRIPTION	EVIDENCE
-MEDIUM	combo/recon/system_network	invasive recon val	ip4_addr
-MEDIUM	fs/permission/modify	modifies file permissions	chmod
-MEDIUM	net/ip/parse	parses IP address (IPv4 or IPv6)	inet_addr
-MEDIUM	net/ip/string	converts IP address from byte to string	inet_ntop
-MEDIUM	procfs/meminfo	get memory info	/proc/meminfo
-MEDIUM	ref/ip_port	mentions an IP and port	IP dest_ip ip_port src_ip
-MEDIUM	ref/path/var/log	path reference within /var/log	/var/log/trafficserver
-LOW	dylib/address/check	determine if address belongs to a shared library	dladdr
-LOW	encoding/base64	Supports base64 encoded strings	base64
-LOW	env/TMPDIR	TMPDIR	TMPDIR getenv
-LOW	env/USER	Looks up the USER name of the current user	USER getenv
-LOW	exec/program/background	wait for process to exit	waitpid
-LOW	fd/epoll	I/O event notification facility	epoll_create epoll_wait
-LOW	fs/directory/create	creates directories	mkdir
-LOW	fs/directory/remove	Uses libc functions to remove directories	rmdir
-LOW	fs/file/delete	deletes files	unlink
-LOW	fs/file/truncate	truncate a file to a specified length	ftruncate
-LOW	fs/symlink/resolve	resolves symbolic links	realpath
-LOW	fs/tempdir	looks up location of temp directory	TEMPDIR TMPDIR
-LOW	hash/md5	Uses the MD5 signature format	MD5_Final MD5_Init MD5_Update
-LOW	kernel/hostname/get	get computer host name	gethostname
-LOW	net/dns/txt	Uses DNS TXT (text) records	TXT dns
-LOW	net/hostport/parse	Network address and service translation	freeaddrinfo getaddrinfo
-LOW	net/socket/listen	listen on a socket	listen socket
-LOW	net/socket/local/address	get local address of connected socket	getsockname
-LOW	net/socket/peer/address	get peer address of connected socket	getpeername
-LOW	process/groupid/set	set real and effective group ID of process	setegid
-LOW	process/multithreaded	creates pthreads	pthread_create
-LOW	process/thread_local_storage	Uses glibc thread local storage	__tls_get_addr
-LOW	process/userid/set	set real and effective user ID of current process	seteuid
-LOW	ref/path/var	path reference within /var	/var/log/trafficserver /var/trafficserver
-LOW	ref/words/plugin	references a 'plugin'	diags_on_for_plugins

Deleted: trafficserver-9/usr/lib/libtscppapi.so.9.2.3 [⚠️ MEDIUM]

RISK	KEY	DESCRIPTION	EVIDENCE
-MEDIUM	net/http/post	submit content to websites	HTTP POST http
-MEDIUM	net/ip/string	converts IP address from byte to string	inet_ntop
-MEDIUM	ref/words/intercept	References interception	intercept
-LOW	net/http/request	makes HTTP requests	HTTP/1.
-LOW	ref/words/plugin	references a 'plugin'	Creating TransformationPlugin Creating new TransactionPlugin Destroying TransactionPlugin Destroying TransformationPlugin InterceptPlugin Invoking global plugin OutputComplete TransformationPlugin Registered global plugin RemapPlugin TSPluginRegister TransactionPlugin use _GLOBAL__sub_I_Plugin addPlugin already paused TransformationPlugin cleanupTransactionPlugin handleGlobalPluginEvents handleTransactionPluginEvents handleTransformationPluginEvents handleTransformationPluginRead invokePluginForEvent mutex to delete transaction plugin at p for global plugin p registering new TransactionPlugin produce TransformationPlugin t get plugin lock

Deleted: trafficserver-9/usr/lib/libtsmgmt.so.9.2.3 [⚠️ MEDIUM]

RISK	KEY	DESCRIPTION	EVIDENCE
-MEDIUM	ref/site/http/dynamic	URL that is dynamically generated	http://%s
-LOW	net/hostname/resolve	resolve network host name to IP address	gethostbyname
-LOW	net/http/request	makes HTTP requests	HTTP/1.
-LOW	net/socket/listen	listen on a socket	accept socket
-LOW	net/socket/send	send a message to a socket	sendto
-LOW	process/multithreaded	creates pthreads	pthread_create
-LOW	ref/words/plugin	references a 'plugin'	Plugin message TSPluginInit

Added: trafficserver-9/usr/lib/libtscppapi.so.9.2.4 [⚠️ MEDIUM]

RISK	KEY	DESCRIPTION	EVIDENCE
+MEDIUM	net/http/post	submit content to websites	HTTP POST http
+MEDIUM	net/ip/string	converts IP address from byte to string	inet_ntop
+MEDIUM	ref/words/intercept	References interception	intercept
+LOW	net/http/request	makes HTTP requests	HTTP/1.
+LOW	ref/words/plugin	references a 'plugin'	Creating TransformationPlugin Creating new TransactionPlugin Destroying TransactionPlugin Destroying TransformationPlugin InterceptPlugin Invoking global plugin OutputComplete TransformationPlugin Registered global plugin RemapPlugin TSPluginRegister TransactionPlugin use _GLOBAL__sub_I_Plugin addPlugin already paused TransformationPlugin cleanupTransactionPlugin handleGlobalPluginEvents handleTransactionPluginEvents handleTransformationPluginEvents handleTransformationPluginRead invokePluginForEvent mutex to delete transaction plugin at p for global plugin p registering new TransactionPlugin produce TransformationPlugin t get plugin lock

Added: trafficserver-9/usr/lib/libtsmgmt.so.9.2.4 [⚠️ MEDIUM]

RISK	KEY	DESCRIPTION	EVIDENCE
+MEDIUM	ref/site/http/dynamic	URL that is dynamically generated	http://%s
+LOW	net/hostname/resolve	resolve network host name to IP address	gethostbyname
+LOW	net/http/request	makes HTTP requests	HTTP/1.
+LOW	net/socket/listen	listen on a socket	accept socket
+LOW	net/socket/send	send a message to a socket	sendto
+LOW	process/multithreaded	creates pthreads	pthread_create
+LOW	ref/words/plugin	references a 'plugin'	Plugin message TSPluginInit

Added: trafficserver-9/usr/lib/libtscore.so.9.2.4 [⚠️ MEDIUM]

RISK	KEY	DESCRIPTION	EVIDENCE
+MEDIUM	combo/recon/system_network	invasive recon val	ip4_addr
+MEDIUM	fs/permission/modify	modifies file permissions	chmod
+MEDIUM	net/ip/parse	parses IP address (IPv4 or IPv6)	inet_addr
+MEDIUM	net/ip/string	converts IP address from byte to string	inet_ntop
+MEDIUM	procfs/meminfo	get memory info	/proc/meminfo
+MEDIUM	ref/ip_port	mentions an IP and port	IP dest_ip ip_port src_ip
+MEDIUM	ref/path/var/log	path reference within /var/log	/var/log/trafficserver
+LOW	dylib/address/check	determine if address belongs to a shared library	dladdr
+LOW	encoding/base64	Supports base64 encoded strings	base64
+LOW	env/TMPDIR	TMPDIR	TMPDIR getenv
+LOW	env/USER	Looks up the USER name of the current user	USER getenv
+LOW	exec/program/background	wait for process to exit	waitpid
+LOW	fd/epoll	I/O event notification facility	epoll_create epoll_wait
+LOW	fs/directory/create	creates directories	mkdir
+LOW	fs/directory/remove	Uses libc functions to remove directories	rmdir
+LOW	fs/file/delete	deletes files	unlink
+LOW	fs/file/truncate	truncate a file to a specified length	ftruncate
+LOW	fs/symlink/resolve	resolves symbolic links	realpath
+LOW	fs/tempdir	looks up location of temp directory	TEMPDIR TMPDIR
+LOW	hash/md5	Uses the MD5 signature format	MD5_Final MD5_Init MD5_Update
+LOW	kernel/hostname/get	get computer host name	gethostname
+LOW	net/dns/txt	Uses DNS TXT (text) records	TXT dns
+LOW	net/hostport/parse	Network address and service translation	freeaddrinfo getaddrinfo
+LOW	net/socket/listen	listen on a socket	listen socket
+LOW	net/socket/local/address	get local address of connected socket	getsockname
+LOW	net/socket/peer/address	get peer address of connected socket	getpeername
+LOW	process/groupid/set	set real and effective group ID of process	setegid
+LOW	process/multithreaded	creates pthreads	pthread_create
+LOW	process/thread_local_storage	Uses glibc thread local storage	__tls_get_addr
+LOW	process/userid/set	set real and effective user ID of current process	seteuid
+LOW	ref/path/var	path reference within /var	/var/log/trafficserver /var/trafficserver
+LOW	ref/words/plugin	references a 'plugin'	diags_on_for_plugins

Changed: trafficserver-9/usr/bin/traffic_server