Register | Log in

libhttp-headers-actionpack-perl

HTTP Action, Adventure and Excitement

Choose email to subscribe with

general

source: libhttp-headers-actionpack-perl (main)
version: 0.10-1
maintainer: Debian Perl Group (archive) (DMD) (LowNMU)
uploaders: Jonas Smedegaard [DMD]
arch: all
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.09-1.1
oldstable: 0.09-2
stable: 0.09-3
testing: 0.10-1
unstable: 0.10-1

versioned links

0.09-1.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.09-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.09-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.10-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libhttp-headers-actionpack-perl

action needed

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2026-113877: HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. _language_match interpolates each Accept-Language range into the pattern `/^$range\-/i` without escaping it, so regular expression syntax in the header reaches the regex engine. A 12-byte range such as `(a?|b?){26}z` backtracks for seconds, and each increment of the quantifier doubles the time. An invalid range such as `(` fails to compile. A remote attacker can exhaust CPU, or make choose_language die, in any application that passes an untrusted Accept-Language header to it.

Created: 2026-10-24 Last update: 2026-10-27 00:30

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2026-113877: HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. _language_match interpolates each Accept-Language range into the pattern `/^$range\-/i` without escaping it, so regular expression syntax in the header reaches the regex engine. A 12-byte range such as `(a?|b?){26}z` backtracks for seconds, and each increment of the quantifier doubles the time. An invalid range such as `(` fails to compile. A remote attacker can exhaust CPU, or make choose_language die, in any application that passes an untrusted Accept-Language header to it.

Created: 2026-10-24 Last update: 2026-10-27 00:30

Failed to analyze the VCS repository. Please troubleshoot and fix the issue. high

vcswatch reports that there is an error with this package's VCS, or the debian/changelog file inside it. Please check the error shown below and try to fix it. You might have to update the VCS URL in the debian/control file to point to the correct repository.

fatal: unable to access 'https://salsa.debian.org/perl-team/modules/packages/libhttp-headers-actionpack-perl.git/': The requested URL returned error: 503

Created: 2026-10-24 Last update: 2026-10-24 16:50

news

[2026-10-24] Accepted libhttp-headers-actionpack-perl 0.10-1 (source) into unstable (gregor herrmann)
[2025-08-17] libhttp-headers-actionpack-perl 0.09-4 MIGRATED to testing (Debian testing watch)
[2025-08-11] Accepted libhttp-headers-actionpack-perl 0.09-4 (source) into unstable (Alexandre Detiste)
[2024-03-11] libhttp-headers-actionpack-perl 0.09-3 MIGRATED to testing (Debian testing watch)
[2024-03-06] Accepted libhttp-headers-actionpack-perl 0.09-3 (source) into unstable (gregor herrmann)
[2022-06-19] libhttp-headers-actionpack-perl 0.09-2 MIGRATED to testing (Debian testing watch)
[2022-06-19] libhttp-headers-actionpack-perl 0.09-2 MIGRATED to testing (Debian testing watch)
[2022-06-14] Accepted libhttp-headers-actionpack-perl 0.09-2 (source) into unstable (Jelmer Vernooĳ) (signed by: Jelmer Vernooij)
[2021-01-13] libhttp-headers-actionpack-perl 0.09-1.1 MIGRATED to testing (Debian testing watch)
[2021-01-07] Accepted libhttp-headers-actionpack-perl 0.09-1.1 (source) into unstable (Holger Levsen)
[2016-03-23] libhttp-headers-actionpack-perl 0.09-1 MIGRATED to testing (Debian testing watch)
[2016-03-10] Accepted libhttp-headers-actionpack-perl 0.09-1 (source all) into unstable, unstable (Jonas Smedegaard)

bugs [bug history graph]

all: 0

links

homepage
lintian
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.09-4

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing