Advisories » MGASA-2026-0157

Updated perl-HTTP-Daemon package fixes a security vulnerability

Publication date: 29 May 2026
Modification date: 29 May 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-8450

Description

The updated package fixes a security vulnerability:
HTTP::Daemon versions before 6.17 for Perl allow OS command injection
via send_file(). (CVE-2026-8450)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35594
• https://www.openwall.com/lists/oss-security/2026/05/27/5
• https://metacpan.org/release/OALDERS/HTTP-Daemon-6.17/changes
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8450

SRPMS

9/core

• perl-HTTP-Daemon-6.140.0-3.1.mga9