Opened 4 years ago

Closed 4 years ago

#17696 closed enhancement (fixed)

HTTP-Daemon-6.15 (Perl module)

Reported by: Bruce Dubbs Owned by: ken@…
Priority: elevated Milestone: 11.3
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New minor verion.

Change History (5)

comment:1 by ken@…, 4 years ago

Priority: normal → elevated

Changes for version 6.15 - 2023-02-22

Fix CVE-2022-31081: Inconsistent Interpretation of HTTP Requests Correctly handle multiple Content-Length headers and its variants (Theo van Hoesel) Closes "Discrepancies in the Parsing of Content Length header ..." (GH#56) (blessingcharles) kill test server with KILL rather than QUIT (GH#63) (Graham Knop) Create TestServer test lib for running daemon process (GH#62) (Graham Knop) Clean up tests (GH#61) (Graham Knop)

nvd.nist.gov rates this as Medium, the originating CNA (github) rated this as high.

I'd like to take this for 11.4.

comment:2 by ken@…, 4 years ago

Milestone: 11.4 → 11.3
Owner: changed from blfs-book to ken@…
Status: new → assigned

s/11.4/11.3/

comment:4 by ken@…, 4 years ago

Advisory SA 11.2-103 created.

comment:5 by ken@…, 4 years ago

Resolution: → fixed
Status: assigned → closed
Note: See TracTickets for help on using tickets.