Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1111500 > unrolled thread

Bug#1016391: bullseye-pu: libhttp-daemon-perl/6.12-1+deb11u1

Started byThorsten Alteholz <debian@alteholz.de>
First post2022-07-31 00:40 +0200
Last post2022-08-14 17:30 +0200
Articles 4 — 3 participants

Back to article view | Back to linux.debian.bugs.dist


Contents

  Bug#1016391: bullseye-pu: libhttp-daemon-perl/6.12-1+deb11u1  Thorsten Alteholz <debian@alteholz.de> - 2022-07-31 00:40 +0200
    Bug#1016391: bullseye-pu: libhttp-daemon-perl/6.12-1+deb11u1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2022-08-06 19:30 +0200
      Bug#1016391: bullseye-pu: libhttp-daemon-perl/6.12-1+deb11u1 Thorsten Alteholz <debian@alteholz.de> - 2022-08-07 00:40 +0200
    Bug#1016391: libhttp-daemon-perl 6.12-1+deb11u1 flagged for acceptance Adam D Barratt <adam@adam-barratt.org.uk> - 2022-08-14 17:30 +0200

#1111500 — Bug#1016391: bullseye-pu: libhttp-daemon-perl/6.12-1+deb11u1

FromThorsten Alteholz <debian@alteholz.de>
Date2022-07-31 00:40 +0200
SubjectBug#1016391: bullseye-pu: libhttp-daemon-perl/6.12-1+deb11u1
Message-ID<EP3hL-eUKs-1@gated-at.bofh.it>

[Multipart message — attachments visible in raw view] — view raw

Package: release.debian.org
Severity: normal
Tags: bulleye
User: release.debian.org@packages.debian.org
Usertags: pu


The attached debdiff for libhttp-daemon-perl fixes CVE-2022-31081 in 
Bullseye. This CVE has been marked as no-dsa by the security team.

The patch is accompanied by a new test and should not create any issue.
It had been used to fix unstable and will be used for Buster, <Stretch and 
Jessie as well.

   Thorsten

[toc] | [next] | [standalone]


#1112259

From"Adam D. Barratt" <adam@adam-barratt.org.uk>
Date2022-08-06 19:30 +0200
Message-ID<ERvMC-gomB-3@gated-at.bofh.it>
In reply to#1111500
Control: tags -1 + confirmed

On Sat, 2022-07-30 at 22:11 +0000, Thorsten Alteholz wrote:
> The attached debdiff for libhttp-daemon-perl fixes CVE-2022-31081 in 
> Bullseye. This CVE has been marked as no-dsa by the security team.
> 
> The patch is accompanied by a new test and should not create any
> issue.
> 

Please go ahead.

Regards,

Adam

[toc] | [prev] | [next] | [standalone]


#1112303

FromThorsten Alteholz <debian@alteholz.de>
Date2022-08-07 00:40 +0200
Message-ID<ERACB-grjw-3@gated-at.bofh.it>
In reply to#1112259

On Sat, 6 Aug 2022, Adam D. Barratt wrote:
> Please go ahead.

... and uploaded.

Thanks!
  Thorsten

[toc] | [prev] | [next] | [standalone]


#1113068 — Bug#1016391: libhttp-daemon-perl 6.12-1+deb11u1 flagged for acceptance

FromAdam D Barratt <adam@adam-barratt.org.uk>
Date2022-08-14 17:30 +0200
SubjectBug#1016391: libhttp-daemon-perl 6.12-1+deb11u1 flagged for acceptance
Message-ID<EUnIR-ydy-3@gated-at.bofh.it>
In reply to#1111500
package release.debian.org
tags 1016391 = bullseye pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bullseye.

Thanks for your contribution!

Upload details
==============

Package: libhttp-daemon-perl
Version: 6.12-1+deb11u1

Explanation: improve handling of Content-Length header [CVE-2022-31081]

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.bugs.dist


csiph-web