libhttp-daemon-perl 6.01-1ubuntu0.1 source package in Ubuntu

Changelog

libhttp-daemon-perl (6.01-1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: HTTP Request Smuggling issue
    - debian/patches/CVE-2022-31081-pre1.patch: rename variables in
      lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-1.patch: fix Content-Length issues in
      lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-2.patch: include reason in response
      body content in lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-3.patch: add new test to
      t/content_length.t.
    - CVE-2022-31081

 -- Marc Deslauriers <email address hidden>  Wed, 13 Jul 2022 09:23:34 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
perl
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates main perl
Bionic security main perl

Builds

Bionic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
libhttp-daemon-perl_6.01.orig.tar.gz 18.2 KiB 43fd867742701a3f9fcc7bd59838ab72c6490c0ebaf66901068ec6997514adc2
libhttp-daemon-perl_6.01-1ubuntu0.1.debian.tar.xz 6.0 KiB 72d810045d792acd0ef8db3cd2a61da9f41fec93e98f1fcd63d66cc3e9de8b86
libhttp-daemon-perl_6.01-1ubuntu0.1.dsc 2.2 KiB 72c9d47fbb97dfaa49887c5fd2497fa3a33b83932a0684ea9f7e19295de2e5c0

View changes file

Binary packages built by this source

libhttp-daemon-perl: simple http server class

 Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a
 socket for incoming requests. The HTTP::Daemon is a subclass of
 IO::Socket::INET, so you can perform socket operations directly on it too.
 .
 The accept() method will return when a connection from a client is available.
 The returned value will be an HTTP::Daemon::ClientConn object which is
 another IO::Socket::INET subclass. Calling the get_request() method on this
 object will read data from the client and return an HTTP::Request object. The
 ClientConn object also provide methods to send back various responses.
 .
 This HTTP daemon does not fork(2) for you. Your application, i.e. the user of
 the HTTP::Daemon is responsible for forking if that is desirable. Also note
 that the user is responsible for generating responses that conform to the
 HTTP/1.1 protocol.