A vulnerability was found in HTTP-Daemon allowing header manipulation or filter bypass.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-perl/HTTP-Daemon | * | < 6.160.0 | >= 6.160.0 |
HTTP-Daemon provides a base class for simple HTTP servers.
Inconsistent Interpretation of HTTP Requests.
The bug could potentially be exploited to gain privileged access to APIs or poison intermediate caches.
There is no known workaround at this time.
All HTTP-Daemon users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-perl/HTTP-Daemon-6.160.0"