libhttp-daemon-perl (6.01-1ubuntu0.1+esm1) bionic-security; urgency=medium

  * SECURITY UPDATE: Remote code execution via send_file.
    - debian/patches/CVE-2026-8450.patch: Change open to 3 args and add 0E0
      with return in lib/HTTP/Daemon.pm.
    - CVE-2026-8450

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Tue, 09 Jun 2026 17:44:17 -0230

libhttp-daemon-perl (6.01-1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: HTTP Request Smuggling issue
    - debian/patches/CVE-2022-31081-pre1.patch: rename variables in
      lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-1.patch: fix Content-Length issues in
      lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-2.patch: include reason in response
      body content in lib/HTTP/Daemon.pm.
    - debian/patches/CVE-2022-31081-3.patch: add new test to
      t/content_length.t.
    - CVE-2022-31081

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 13 Jul 2022 09:23:34 -0400

libhttp-daemon-perl (6.01-1) unstable; urgency=low

  * Team upload

  [ Ansgar Burchardt ]
  * debian/control: Convert Vcs-* fields to Git.

  [ Salvatore Bonaccorso ]
  * debian/copyright: Replace DEP5 Format-Specification URL from
    svn.debian.org to anonscm.debian.org URL.

  [ Alessandro Ghedini ]
  * New upstream release
  * Bump debhelper compat level to 8
  * Bump Standards-Version to 3.9.2
  * One sorted dep per line

 -- Alessandro Ghedini <al3xbio@gmail.com>  Sun, 19 Feb 2012 19:28:44 +0100

libhttp-daemon-perl (6.00-1) unstable; urgency=low

  * Initial Release (Closes: #617520).

 -- Nicholas Bamber <nicholas@periapt.co.uk>  Tue, 22 Mar 2011 23:25:10 +0000
