# trafficserver security updates

Patch Radar has 47 security fixes for trafficserver, closing 35 CVEs, 1 of which is being exploited. The newest is DEBIAN-CVE-2025-65114 (9.2.5+ds-0+deb12u4), released April 2, 2026.

- Web page: https://patchblox.com/security/product/linux/trafficserver
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2025-65114](https://patchblox.com/security/data/fix/linux/debian-cve-2025-65114.md) | Apr 2, 2026 | Debian 12.15 (bookworm) 9.2.5+ds-0+deb12u4 | High | 1 | 0 |
| [DEBIAN-CVE-2025-58136](https://patchblox.com/security/data/fix/linux/debian-cve-2025-58136.md) | Apr 2, 2026 | Debian 12.15 (bookworm) 9.2.5+ds-0+deb12u4 | High | 1 | 0 |
| [DSA-5948-1](https://patchblox.com/security/data/fix/linux/dsa-5948-1.md) | Jun 24, 2025 | Debian 12.15 (bookworm) 9.2.5+ds-0+deb12u3 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-49763](https://patchblox.com/security/data/fix/linux/debian-cve-2025-49763.md) | Jun 19, 2025 | Debian 12.15 (bookworm) 9.2.5+ds-0+deb12u3 | High | 1 | 0 |
| [DEBIAN-CVE-2025-31698](https://patchblox.com/security/data/fix/linux/debian-cve-2025-31698.md) | Jun 19, 2025 | Debian 12.15 (bookworm) 9.2.5+ds-0+deb12u3 | High | 1 | 0 |
| [DSA-5896-1](https://patchblox.com/security/data/fix/linux/dsa-5896-1.md) | Apr 5, 2025 | Debian 12.15 (bookworm) 9.2.5+ds-0+deb12u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-56195](https://patchblox.com/security/data/fix/linux/debian-cve-2024-56195.md) | Mar 6, 2025 | Debian 12.15 (bookworm) 9.2.5+ds-0+deb12u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-56202](https://patchblox.com/security/data/fix/linux/debian-cve-2024-56202.md) | Mar 6, 2025 | Debian 12.15 (bookworm) 9.2.5+ds-0+deb12u2 | Routine | 1 | 0 |
| [DLA-4055-1](https://patchblox.com/security/data/fix/linux/dla-4055-1.md) | Feb 16, 2025 | Debian 11.6 (bullseye) 8.1.11+ds-0+deb11u2 | High | 1 | 0 |
| [DEBIAN-CVE-2024-50306](https://patchblox.com/security/data/fix/linux/debian-cve-2024-50306.md) | Nov 14, 2024 | Debian 12.15 (bookworm) 9.2.5+ds-0+deb12u2 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2024-50305](https://patchblox.com/security/data/fix/linux/debian-cve-2024-50305.md) | Nov 14, 2024 | Debian 12.15 (bookworm) 9.2.5+ds-0+deb12u2 | High | 1 | 0 |
| [DEBIAN-CVE-2024-38479](https://patchblox.com/security/data/fix/linux/debian-cve-2024-38479.md) | Nov 14, 2024 | Debian 12.15 (bookworm) 9.2.5+ds-0+deb12u2 | High | 1 | 0 |
| [trafficserver 9.1.1+ds-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-trafficserver-9.1.1-ds-2ubuntu0.1.md) | Nov 14, 2024 | Ubuntu 22.04.1 LTS (jammy) 9.1.1+ds-2ubuntu0.1 | High | 1 | 0 |
| [trafficserver 9.2.3+ds-1+deb12u1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-trafficserver-9.2.3-ds-1-deb12u1ubuntu0.1.md) | Nov 14, 2024 | Ubuntu 24.04.5 LTS (noble) 9.2.3+ds-1+deb12u1ubuntu0.1 | High | 1 | 0 |
| [trafficserver 9.2.5+ds-1ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-trafficserver-9.2.5-ds-1ubuntu2.1.md) | Nov 14, 2024 | Ubuntu 25.10 (questing) 9.2.5+ds-1ubuntu2.1 | High | 1 | 0 |
| [DLA-3897-1](https://patchblox.com/security/data/fix/linux/dla-3897-1.md) | Sep 27, 2024 | Debian 11.6 (bullseye) 8.1.11+ds-0+deb11u1 | Routine | 1 | 0 |
| [DSA-5758-1](https://patchblox.com/security/data/fix/linux/dsa-5758-1.md) | Aug 26, 2024 | Debian 12.15 (bookworm) 9.2.5+ds-0+deb12u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2024-35296](https://patchblox.com/security/data/fix/linux/debian-cve-2024-35296.md) | Jul 26, 2024 | Debian 12.15 (bookworm) 9.2.5+ds-0+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-35161](https://patchblox.com/security/data/fix/linux/debian-cve-2024-35161.md) | Jul 26, 2024 | Debian 12.15 (bookworm) 9.2.5+ds-0+deb12u1 | High | 1 | 0 |
| [DSA-5659-1](https://patchblox.com/security/data/fix/linux/dsa-5659-1.md) | Apr 14, 2024 | Debian 11.6 (bullseye) 8.1.10+ds-1~deb11u1 | Routine | 1 | 0 |
| [DSA-5659-1](https://patchblox.com/security/data/fix/linux/dsa-5659-1.md) | Apr 14, 2024 | Debian 12.15 (bookworm) 9.2.4+ds-0+deb12u1 | Routine | 1 | 0 |
| [DSA-5549-1](https://patchblox.com/security/data/fix/linux/dsa-5549-1.md) | Nov 5, 2023 | Debian 11.6 (bullseye) 8.1.9+ds-1~deb11u1 | Routine | 1 | 0 |
| [DSA-5549-1](https://patchblox.com/security/data/fix/linux/dsa-5549-1.md) | Nov 5, 2023 | Debian 12.15 (bookworm) 9.2.3+ds-1+deb12u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-39456](https://patchblox.com/security/data/fix/linux/debian-cve-2023-39456.md) | Oct 17, 2023 | Debian 12.15 (bookworm) 9.2.3+ds-1+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-41752](https://patchblox.com/security/data/fix/linux/debian-cve-2023-41752.md) | Oct 17, 2023 | Debian 12.15 (bookworm) 9.2.3+ds-1+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-44487](https://patchblox.com/security/data/fix/linux/debian-cve-2023-44487.md) | Oct 10, 2023 | Debian 12.15 (bookworm) 9.2.3+ds-1+deb12u1 | Patch now | 1 | 1 |
| [trafficserver 8.0.5+ds-3ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-trafficserver-8.0.5-ds-3ubuntu0.1-esm1.md) | Oct 9, 2023 | Ubuntu 20.04 LTS (focal) 8.0.5+ds-3ubuntu0.1~esm1 | Patch now | 1 | 1 |
| [trafficserver 9.1.1+ds-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-trafficserver-9.1.1-ds-2ubuntu0.1-esm1.md) | Oct 9, 2023 | Ubuntu 22.04.1 LTS (jammy) 9.1.1+ds-2ubuntu0.1~esm1 | Patch now | 1 | 1 |
| [DEBIAN-CVE-2023-33934](https://patchblox.com/security/data/fix/linux/debian-cve-2023-33934.md) | Aug 9, 2023 | Debian 12.15 (bookworm) 9.2.3+ds-1+deb12u1 | Urgent | 1 | 0 |
| [DSA-5435-1](https://patchblox.com/security/data/fix/linux/dsa-5435-1.md) | Jun 21, 2023 | Debian 11.6 (bullseye) 8.1.7+ds-1~deb11u1 | Routine | 1 | 0 |
| [DSA-5435-1](https://patchblox.com/security/data/fix/linux/dsa-5435-1.md) | Jun 21, 2023 | Debian 12.15 (bookworm) 9.2.0+ds-2+deb12u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-30631](https://patchblox.com/security/data/fix/linux/debian-cve-2023-30631.md) | Jun 14, 2023 | Debian 12.15 (bookworm) 9.2.0+ds-2+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-33933](https://patchblox.com/security/data/fix/linux/debian-cve-2023-33933.md) | Jun 14, 2023 | Debian 12.15 (bookworm) 9.2.0+ds-2+deb12u1 | High | 1 | 0 |
| [DSA-5311-1](https://patchblox.com/security/data/fix/linux/dsa-5311-1.md) | Jan 8, 2023 | Debian 11.6 (bullseye) 8.1.6+ds-1~deb11u1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-40743](https://patchblox.com/security/data/fix/linux/debian-cve-2022-40743.md) | Dec 19, 2022 | Debian 12.15 (bookworm) 9.1.4+ds-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-32749](https://patchblox.com/security/data/fix/linux/debian-cve-2022-32749.md) | Dec 19, 2022 | Debian 12.15 (bookworm) 9.1.4+ds-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-37392](https://patchblox.com/security/data/fix/linux/debian-cve-2022-37392.md) | Dec 19, 2022 | Debian 12.15 (bookworm) 9.1.4+ds-1 | Routine | 1 | 0 |
| [DSA-5206-1](https://patchblox.com/security/data/fix/linux/dsa-5206-1.md) | Aug 12, 2022 | Debian 11.6 (bullseye) 8.1.5+ds-1~deb11u1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-31779](https://patchblox.com/security/data/fix/linux/debian-cve-2022-31779.md) | Aug 10, 2022 | Debian 12.15 (bookworm) 9.1.3+ds-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-31780](https://patchblox.com/security/data/fix/linux/debian-cve-2022-31780.md) | Aug 10, 2022 | Debian 12.15 (bookworm) 9.1.3+ds-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-28129](https://patchblox.com/security/data/fix/linux/debian-cve-2022-28129.md) | Aug 10, 2022 | Debian 12.15 (bookworm) 9.1.3+ds-1 | High | 1 | 0 |
| [DEBIAN-CVE-2021-37150](https://patchblox.com/security/data/fix/linux/debian-cve-2021-37150.md) | Aug 10, 2022 | Debian 12.15 (bookworm) 9.1.3+ds-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-31778](https://patchblox.com/security/data/fix/linux/debian-cve-2022-31778.md) | Aug 10, 2022 | Debian 12.15 (bookworm) 9.1.3+ds-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-25763](https://patchblox.com/security/data/fix/linux/debian-cve-2022-25763.md) | Aug 10, 2022 | Debian 12.15 (bookworm) 9.1.3+ds-1 | High | 1 | 0 |
| [DSA-5153-1](https://patchblox.com/security/data/fix/linux/dsa-5153-1.md) | May 30, 2022 | Debian 11.6 (bullseye) 8.1.1+ds-1.1+deb11u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2021-44040](https://patchblox.com/security/data/fix/linux/debian-cve-2021-44040.md) | Mar 23, 2022 | Debian 12.15 (bookworm) 9.1.2+ds-1 | High | 1 | 0 |
| [DEBIAN-CVE-2021-44759](https://patchblox.com/security/data/fix/linux/debian-cve-2021-44759.md) | Mar 23, 2022 | Debian 12.15 (bookworm) 9.1.0+ds-1 | High | 1 | 0 |

---

Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
