UbuntuUpdates.org

Package "libhttp-daemon-perl"

Name: libhttp-daemon-perl

Description:

simple http server class
Latest version: 6.06-1ubuntu0.1
Release: focal (20.04)
Level: security
Repository: main
Homepage: https://metacpan.org/release/HTTP-Daemon

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libhttp-daemon-perl"

All arch deb package
APT INSTALL

Other versions of "libhttp-daemon-perl" in Focal

Repository Area Version
base main 6.06-1
updates main 6.06-1ubuntu0.1

Changelog

Version: 6.06-1ubuntu0.1 2022-07-14 15:06:33 UTC

  libhttp-daemon-perl (6.06-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: HTTP Request Smuggling issue
    - debian/patches/CVE-2022-31081-pre1.patch: rename variables in
      lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-1.patch: fix Content-Length issues in
      lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-2.patch: include reason in response
      body content in lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-3.patch: add new test to
      t/content_length.t.
    - CVE-2022-31081

 -- Marc Deslauriers <email address hidden> Wed, 13 Jul 2022 08:46:03 -0400
CVE-2022-31081 HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploite


About   -   Send Feedback to @ubuntu_updates