libhttp-daemon-perl 6.06-1ubuntu0.1 source package in Ubuntu

Changelog

libhttp-daemon-perl (6.06-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: HTTP Request Smuggling issue
    - debian/patches/CVE-2022-31081-pre1.patch: rename variables in
      lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-1.patch: fix Content-Length issues in
      lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-2.patch: include reason in response
      body content in lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-3.patch: add new test to
      t/content_length.t.
    - CVE-2022-31081

 -- Marc Deslauriers <email address hidden>  Wed, 13 Jul 2022 08:46:03 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
perl
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates main perl
Focal security main perl

Builds

Focal: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
libhttp-daemon-perl_6.06.orig.tar.gz 44.5 KiB fc03a161b54553f766457a4267e7066767f54ad01cacfe9a91d7caa2a0319bad
libhttp-daemon-perl_6.06-1ubuntu0.1.debian.tar.xz 6.9 KiB 5d845c7239dce696e79c63e1767c1a67763ce575487b13db9f410fececa8baaa
libhttp-daemon-perl_6.06-1ubuntu0.1.dsc 2.5 KiB 3948050515bb793f8df1634808ef5b77ac2d9803eac81e228a954cd68b2ec53e

View changes file

Binary packages built by this source

libhttp-daemon-perl: simple http server class

 Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a
 socket for incoming requests. The HTTP::Daemon is a subclass of
 IO::Socket::IP, so you can perform socket operations directly on it too.
 .
 The accept() method will return when a connection from a client is available.
 The returned value will be an HTTP::Daemon::ClientConn object which is
 another IO::Socket::IP subclass. Calling the get_request() method on this
 object will read data from the client and return an HTTP::Request object. The
 ClientConn object also provide methods to send back various responses.
 .
 This HTTP daemon does not fork(2) for you. Your application, i.e. the user of
 the HTTP::Daemon is responsible for forking if that is desirable. Also note
 that the user is responsible for generating responses that conform to the
 HTTP/1.1 protocol.