| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: perl-HTTP-Daemon | Distribution: openSUSE Tumbleweed |
| Version: 6.170.0 | Vendor: openSUSE |
| Release: 1.3 | Build date: Mon Jun 1 22:11:41 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 68516 | Source RPM: perl-HTTP-Daemon-6.170.0-1.3.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://metacpan.org/release/HTTP-Daemon | |
| Summary: Simple http server class | |
Instances of the 'HTTP::Daemon' class are HTTP/1.1 servers that listen on a socket for incoming requests. The 'HTTP::Daemon' is a subclass of 'IO::Socket::IP', so you can perform socket operations directly on it too. Please note that 'HTTP::Daemon' used to be a subclass of 'IO::Socket::INET'. To support IPv6, it switched the parent class to 'IO::Socket::IP' at version 6.05. See IPv6 SUPPORT for details. The accept() method will return when a connection from a client is available. The returned value will be an 'HTTP::Daemon::ClientConn' object which is another 'IO::Socket::IP' subclass. Calling the get_request() method on this object will read data from the client and return an 'HTTP::Request' object. The ClientConn object also provide methods to send back various responses.
Artistic-1.0 OR GPL-1.0-or-later
* Thu May 21 2026 Tina Müller <timueller+perl@suse.de>
- updated to 6.170.0 (6.17)
see /usr/share/doc/packages/perl-HTTP-Daemon/Changes
6.17 2026-05-19 23:11:06Z
- Fix CVE-2026-8450 (affects 6.15 and earlier): 2-arg open() in
send_file() enabled RCE / arbitrary file write / response-body
exfiltration when a string argument was derived from attacker-
influenced input. send_file() now uses 3-arg open() with an
explicit '<' read mode, so the path is always treated as a literal
filename and 2-arg open() shell-magic shapes ('| cmd', 'cmd |',
'> path', etc.) are no longer interpreted. send_file() now also
returns '0E0' (true zero) on a successful zero-byte transfer so
callers can distinguish empty file from open failure (undef). See
https://www.cve.org/CVERecord?id=CVE-2026-8450 for the advisory.
Reported and patched by Stig Palmquist (stigtsp). (Stig Palmquist,
Olaf Alders)
bsc#1266370
* Fri Jul 11 2025 Tina Müller <tina.mueller@suse.com>
- Normalize CPAN version
See https://github.com/openSUSE/cpanspec/issues/47 for details
* Thu Mar 09 2023 Tina Müller <tina.mueller@suse.com>
- Remove patches
- CVE-2022-31081-2.patch
- CVE-2022-31081-Add-new-test-for-Content-Length-issues.patch
- CVE-2022-31081.patch
They were fixed upstream (bsc#1201157)
* Sat Feb 25 2023 Tina Müller <timueller+perl@suse.de>
- updated to 6.16
see /usr/share/doc/packages/perl-HTTP-Daemon/Changes
6.16 2023-02-24 03:07:14Z
- Bump LWP::UserAgent to 6.37 in TestSuggests (GH#65) (Olaf Alders)
6.15 2023-02-22 22:02:46Z
- Fix CVE-2022-31081: Inconsistent Interpretation of HTTP Requests
Correctly handle multiple Content-Length headers and its variants
(Theo van Hoesel)
Closes "Discrepancies in the Parsing of Content Length header ..." (GH#56)
(blessingcharles)
- kill test server with KILL rather than QUIT (GH#63) (Graham Knop)
- Create TestServer test lib for running daemon process (GH#62) (Graham Knop)
- Clean up tests (GH#61) (Graham Knop)
* Wed Jul 13 2022 Otto Hollmann <otto.hollmann@suse.com>
- Fix request smuggling in HTTP::Daemon
(CVE-2022-31081, bsc#1201157)
* CVE-2022-31081.patch
* CVE-2022-31081-2.patch
* CVE-2022-31081-Add-new-test-for-Content-Length-issues.patch
* Fri Mar 04 2022 Tina Müller <timueller+perl@suse.de>
- updated to 6.14
see /usr/share/doc/packages/perl-HTTP-Daemon/Changes
6.14 2022-03-03 20:47:51Z
- Test using loopback rather than internet accessible address (GH#52)
(Michal Josef Špaček)
- Use GH Perl helpers for build and coverage jobs (GH#53) (Olaf Alders)
* Thu Feb 10 2022 Tina Müller <timueller+perl@suse.de>
- updated to 6.13
see /usr/share/doc/packages/perl-HTTP-Daemon/Changes
6.13 2022-02-09 20:39:12Z
- Bump minimum IO::Socket::IP version to 0.32 (GH#50) (Olaf Alders)
* Fri Jun 05 2020 Tina Müller <timueller+perl@suse.de>
- updated to 6.12
see /usr/share/doc/packages/perl-HTTP-Daemon/Changes
6.12 2020-06-04 16:01:31Z
- No changes since TRIAL release 6.11
6.11 2020-06-03 14:47:21Z (TRIAL RELEASE)
- An IPv6 zone separator must be URI-quoted (GH#47) (Petr Pisar and Olaf
Alders)
* Wed May 27 2020 Tina Müller <timueller+perl@suse.de>
updated to 6.10
see /usr/share/doc/packages/perl-HTTP-Daemon/Changes
6.10 2020-05-26 16:20:36Z
- No changes since TRIAL release 6.09
6.09 2020-05-25 16:52:14Z (TRIAL RELEASE)
- Require IO::Socket::IP 0.25 so that HTTP::Tiny uses it (GH#45) (Shoichi Kaji)
6.08 2020-05-22 15:26:00Z (TRIAL RELEASE)
- In t/chunked.t, leave choosing IP address family to IO::Socket::IP (GH#42) (Shoichi Kaji)
- Add "IPv6 SUPPORT" section to pod (GH#43) (Shoichi Kaji)
- Use HTTP::Tiny 0.042+ for IPv6 support (GH#41) (Shoichi Kaji)
6.07 2020-05-19 19:19:53Z (TRIAL RELEASE)
- Prefer IP address for host in $d->url (GH#40) (Shoichi Kaji)
- Improve documentation readability (GH#36) (Ferenc Erki)
* Fri Aug 30 2019 <timueller+perl@suse.de>
- updated to 6.06
see /usr/share/doc/packages/perl-HTTP-Daemon/Changes
6.06 2019-08-29 14:23:17Z
- Delimit IPv6 numeric address with brackets and URI-quote an IPv6 zone
separator in url() method output (GH#32) (Petr Pisar)
- Handle undef and empty LocalAddr value in new() constructor as an
unspecified address (GH#24, RT#123069) (Petr Pisar)
- Use IO::Socket::IP for IPv6 support. (GH#31) (Chase Whitener)
/usr/lib/perl5/vendor_perl/5.44.0/HTTP /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Daemon.pm /usr/share/doc/packages/perl-HTTP-Daemon /usr/share/doc/packages/perl-HTTP-Daemon/CONTRIBUTING /usr/share/doc/packages/perl-HTTP-Daemon/Changes /usr/share/doc/packages/perl-HTTP-Daemon/README /usr/share/licenses/perl-HTTP-Daemon /usr/share/licenses/perl-HTTP-Daemon/LICENCE /usr/share/man/man3/HTTP::Daemon.3pm.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 03:14:27 2026