RHSA-2026:36188 — Security Advisory
Red Hat Security Advisory: perl-HTTP-Daemon security update
Severity
ImportantRed Hat Product Security
Products
Official CSAF product identity
Published · July 7, 2026
Updated · November 2, 2026
Topic
An update for perl-HTTP-Daemon is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
The perl-HTTP-Daemon package includes the HTTP::Daemon class, a subclass of IO::Socket::IP. Instances of the HTTP::Daemon class are HTTP/1.1 servers that listen on a socket for incoming requests.
Security Fix(es):
- perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in send_file() (CVE-2026-8450)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.