| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: perl-HTTP-Body | Distribution: openSUSE Tumbleweed |
| Version: 1.240.0 | Vendor: openSUSE |
| Release: 1.1 | Build date: Wed Oct 28 21:48:54 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 70583 | Source RPM: perl-HTTP-Body-1.240.0-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://metacpan.org/release/HTTP-Body | |
| Summary: HTTP Body Parser | |
HTTP::Body parses chunks of HTTP POST data and supports application/octet-stream, application/json, application/x-www-form-urlencoded, and multipart/form-data. Chunked bodies are supported by not passing a length value to new(). It is currently used by Catalyst, Dancer, Maypole, Web::Simple and Jedi.
Artistic-1.0 OR GPL-1.0-or-later
* Tue Oct 27 2026 Tina Müller <timueller+perl@suse.de>
- updated to 1.240.0 (1.24)
see /usr/share/doc/packages/perl-HTTP-Body/Changes
1.24 2026-10-26 18:28:01+01:00 Europe/Berlin
- SECURITY, CVE-2026-116131: urlencoded bodies are limited to
$HTTP::Body::UrlEncoded::max_params fields and multipart bodies to
$HTTP::Body::MultiPart::max_parts parts (1000 each); reported and
patched by CPANSec. bsc#1288644
- SECURITY, CVE-2026-116132: the temporary file of an upload that is
still incomplete at DESTROY-time is now always deleted; reported and
patched by CPANSec (also fixes RT#84004) bsc#1288645
- SECURITY, CVE-2026-116133: a multipart body without a boundary or with
a malformed delimiter line no longer takes quadratic time; a malformed
delimiter line now croaks, and padding or an epilogue after the close
delimiter is accepted; reported and patched by CPANSec. bsc#1288646
- SECURITY, CVE-2026-116134: a multipart part's header block is limited
to $HTTP::Body::MultiPart::max_header_size bytes (32768) and
$HTTP::Body::MultiPart::max_header_lines lines (100); reported and
patched by CPANSec. bsc#1288647
- SECURITY, CVE-2026-116135: mixed-case percent escapes (e.g. %aB) in
urlencoded bodies are decoded instead of being dropped; reported and
patched by CPANSec. bsc#1288648
- SECURITY, CVE-2026-116285: the chunk size line of a chunked body is
matched in linear instead of quadratic time bsc#1288649
- SECURITY, CVE-2026-116531: a chunked body is now framed independently
of where the reads feeding add() fall; a read that split a chunk could
leave the parser never reaching 'done', hanging a server that reads
until done bsc#1288650
- INCOMPATIBLE: add() now croaks when one of the new limits is exceeded.
Raise the variable, or set it to 0 to disable that limit, if your
forms need more. See NOTES in HTTP::Body.
- RT#105021: temp-file write errors in MultiPart and OctetStream now
croak instead of silently truncating the stored body
- RT#123615: a NUL byte in a multipart filename is stripped so it cannot
truncate a path handed on downstream
- Moved repository from Shadowcat git to GitHub (libwww-perl/HTTP-Body)
- Updated all metadata resources to point to GitHub
- Fixed prerequisites: moved Digest::MD5 to test deps, changed HTTP::Headers to HTTP::Message
- Added README.md for GitHub
- Updated support section in documentation
- Moved the POD, POD coverage and Perl::Critic tests to xt/release, so
they run on every release instead of being skipped
* Sun Mar 31 2024 Tina Müller <timueller+perl@suse.de>
- updated to 1.23
see /usr/share/doc/packages/perl-HTTP-Body/Changes
1.23 2024-03-30 04:27:56+01:00 Europe/Berlin
* Fri Feb 06 2015 coolo@suse.com
- updated to 1.22
1.22 2015-01-29 04:51:51+01:00 Europe/Berlin
- Fix for the fix..... don't ask
1.21 2015-01-29 04:48:58+01:00 Europe/Berlin
- Fix for failing test if Plack is not installed
1.20 2015-01-28 16:20:59+01:00 Europe/Berlin
- new method 'part_data' which preserves multipart meta information just in cause
you have a form upload with unexpected charsets, etc.
1.19
- Release for cleanup of dzil
- obsolete CVE-2013-4407.patch
* Fri Mar 14 2014 chris@computersalat.de
- fix for bnc#844951 (CVE-2013-4407)
- added patches:
* CVE-2013-4407.patch
* Mon Dec 09 2013 coolo@suse.com
- updated to 1.19 (includes also changelog for old releases)
- Release for cleanup of dzil
- Added configurable basename regexp, test added with fixed regexp for next release
(Torsten Raudssus [GETTY])
- Added .gitignore
* Wed Jun 05 2013 coolo@suse.com
- updated to 1.17
- Added support for application/json (Gareth Kirwan [GBJK])
* Sat Feb 11 2012 coolo@suse.com
- updated to 1.15
- Added missing requirement (Torsten Raudssus [GETTY])
* Sun Nov 20 2011 coolo@suse.com
- update to 1.14
- removed benchmark test data and benchmark script for release
* Wed May 11 2011 dbahi@novell.com
- Fixed the t/08 test
- Added param_order capability
- Patch for test failure
* Wed Dec 01 2010 coolo@novell.com
- switch to perl_requires macro
/usr/lib/perl5/vendor_perl/5.44.0/HTTP /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Body /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Body.pm /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Body/MultiPart.pm /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Body/OctetStream.pm /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Body/UrlEncoded.pm /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Body/XForms.pm /usr/lib/perl5/vendor_perl/5.44.0/HTTP/Body/XFormsMultipart.pm /usr/share/doc/packages/perl-HTTP-Body /usr/share/doc/packages/perl-HTTP-Body/Changes /usr/share/doc/packages/perl-HTTP-Body/README /usr/share/doc/packages/perl-HTTP-Body/README.md /usr/share/licenses/perl-HTTP-Body /usr/share/licenses/perl-HTTP-Body/LICENSE /usr/share/man/man3/HTTP::Body.3pm.gz /usr/share/man/man3/HTTP::Body::MultiPart.3pm.gz /usr/share/man/man3/HTTP::Body::OctetStream.3pm.gz /usr/share/man/man3/HTTP::Body::UrlEncoded.3pm.gz /usr/share/man/man3/HTTP::Body::XForms.3pm.gz /usr/share/man/man3/HTTP::Body::XFormsMultipart.3pm.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Fri Nov 6 22:26:07 2026