UbuntuUpdates.org

Package "libhttp-daemon-perl"

Name: libhttp-daemon-perl

Description:

simple http server class
Latest version: 6.13-1ubuntu0.2
Release: jammy (22.04)
Level: updates
Repository: main
Homepage: https://metacpan.org/release/HTTP-Daemon

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libhttp-daemon-perl"

All arch deb package
APT INSTALL

Other versions of "libhttp-daemon-perl" in Jammy

Repository Area Version
base main 6.13-1
security main 6.13-1ubuntu0.2

Changelog

Version: 6.13-1ubuntu0.2 2026-06-10 19:07:30 UTC

  libhttp-daemon-perl (6.13-1ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Remote code execution via send_file.
    - debian/patches/CVE-2026-8450.patch: Change open to 3 args and add 0E0
      with return in lib/HTTP/Daemon.pm.
    - CVE-2026-8450

 -- Hlib Korzhynskyy <email address hidden> Tue, 09 Jun 2026 17:39:43 -0230
Source diff to previous version
CVE-2026-8450 HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file(). send_file() opens its string argument with Perl's 2-arg open(

Version: 6.13-1ubuntu0.1 2022-07-14 15:06:40 UTC

  libhttp-daemon-perl (6.13-1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: HTTP Request Smuggling issue
    - debian/patches/CVE-2022-31081-pre1.patch: rename variables in
      lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-1.patch: fix Content-Length issues in
      lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-2.patch: include reason in response
      body content in lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-3.patch: add new test to
      t/content_length.t.
    - CVE-2022-31081

 -- Marc Deslauriers <email address hidden> Wed, 13 Jul 2022 07:47:06 -0400
CVE-2022-31081 HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploite


About   -   Send Feedback to @ubuntu_updates