Ubuntu 8419-1 libhttp-daemon-perl Important Remote Code Exec USN-8419-1

ubuntu

June 10, 2026

HTTP-Daemon could be made to run programs if it received specially crafted network traffic.

Summary

HTTP-Daemon could be made to run programs if it received specially crafted

network traffic.

Software Description:

- libhttp-daemon-perl: simple http server class

Details:

It was discovered that HTTP-Daemon incorrectly handled untrusted input

under certain circumstances. A remote attacker could possibly use this

issue to execute arbitrary commands, create or overwrite arbitrary files,

or expose sensitive information.

Topics Covered

security advisory remote access arbitrary code execution Ubuntu important libhttp-daemon-perl

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libhttp-daemon-perl             6.16-1ubuntu0.26.04.1

Ubuntu 25.10
  libhttp-daemon-perl             6.16-1ubuntu0.25.10.1

Ubuntu 24.04 LTS
  libhttp-daemon-perl             6.16-1ubuntu0.24.04.1

Ubuntu 22.04 LTS
  libhttp-daemon-perl             6.13-1ubuntu0.2

Ubuntu 20.04 LTS
  libhttp-daemon-perl             6.06-1ubuntu0.1+esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  libhttp-daemon-perl             6.01-1ubuntu0.1+esm1
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  libhttp-daemon-perl             6.01-1ubuntu0.16.04~esm2
                                  Available with Ubuntu Pro

Ubuntu 14.04 LTS
  libhttp-daemon-perl             6.01-1ubuntu0.14.04~esm2
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.