Thanks Alan.

Just FYI, as of right now, none of the usual Apache Download Mirrors has a copy of trafficserver-5.1.1.tar.bz2.

However, the "Backup Sites" work just fine.  I thought I'd mention it as I have no idea whether the propagation
between the two is manual...or automated.

Regards,

Adam

On Sat, Nov 1, 2014 at 6:18 PM, Alan M. Carroll <amc@apache.org> wrote:
       Apache Traffic Server v5.1.1 Released

The Apache Software Foundation and the Apache Traffic Server project are pleased to announce the release of Apache Traffic Server v5.1.1! This is our latest stable release, and is immediately available for download at:

        http://trafficserver.apache.org/downloads

Upgrading from 5.0.x and 5.1.0 should be seamless. Upgrading from the previous releases, 3.2.0 and later, to v5.1.1 should preserve the cache and not require it to be cleared.  More details are available at:

        https://cwiki.apache.org/confluence/display/TS/Upgrading+to+v5.0

This a security related release and should replace all deployed 5.1.0 instances. The security issues involved are

        * SSL v3 - a security hole was found. As this is a very old protocol Traffic Server was changed to not enable it by default (TS-3135). It can still be enabled in records.config but this now requires explicit administrator action. This is based on CVE-2014-3566.
        * An error in the remap logic (TS-2677) which could potentially enable an open relay was fixed. This is CVE-2014-3624.

More details are available at:

        https://cwiki.apache.org/confluence/display/TS/What's+new+in+v5.1.x

Sincerely,

-- The Apache Traffic Server community



--
____________________________________________________________
Adam W. Dace <colonelforbin74@gmail.com>

Phone: (815) 355-7285
Instant Messenger: AIM & Yahoo! IM - colonelforbin74 | ICQ - #39374451

Google Profile: https://plus.google.com/u/0/109309036874332290399/about