Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
An update that solves one vulnerability can now be installed.. # perl-HTTP-Daemon-6.170.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10938-1 Rating: moderate Cross-References: * CVE-2026-8450 CVSS scores: * CVE-2026-8450 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the perl-HTTP-Daemon-6.170.0-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * perl-HTTP-Daemon 6.170.0-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-8450.html . Update for openSUSE Tumbleweed addresses a moderate severity issue in perl-HTTP-Daemon with significant risk. Patching recommended.. openSUSE Tumbleweed perl-HTTP-Daemon update security. . Severity: moderate. LinuxSecurity.com Team
Request smuggling in HTTP::Daemon (CVE-2022-31081) References: - https://bugs.mageia.org/show_bug.cgi?id=30634 - https://ubuntu.com/security/notices/USN-5520-1 . MGASA-2022-0349 - Updated perl-HTTP-Daemon packages fix security vulnerability Publication date: 01 Oct 2022 URL: https://advisories.mageia.org/MGASA-2022-0349.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-31081 Request smuggling in HTTP::Daemon (CVE-2022-31081) References: - https://bugs.mageia.org/show_bug.cgi?id=30634 - https://ubuntu.com/security/notices/USN-5520-1 - https://www.cve.org/CVERecord?id=CVE-2022-31081 SRPMS: - 8/core/perl-HTTP-Daemon-6.140.0-3.mga8 . Revised perl-HTTP-Daemon distributions rectify request smuggling vulnerability. Date of release: 01 Oct 2022.. Mageia 8 Security Update, HTTP Daemon Fix, Request Smuggling Vulnerability. . LinuxSecurity.com Team
HTTP-Daemon could allow HTTP Request Smuggling attacks.. =========================================================================Ubuntu Security Notice USN-5520-2 July 18, 2022 libhttp-daemon-perl vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM - Ubuntu 14.04 ESM Summary: HTTP-Daemon could allow HTTP Request Smuggling attacks. Software Description: - libhttp-daemon-perl: simple http server class Details: USN-5520-1 fixed a vulnerability in HTTP-Daemon. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that HTTP-Daemon incorrectly handled certain crafted requests. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: libhttp-daemon-perl 6.01-1ubuntu0.16.04~esm1 Ubuntu 14.04 ESM: libhttp-daemon-perl 6.01-1ubuntu0.14.04~esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5520-2 https://ubuntu.com/security/notices/USN-5520-1 CVE-2022-31081 . Ubuntu Security Notice USN-5530-1 reports a vulnerability in the HTTP-Daemon, which may result in HTTP Request Smuggling exploits. Ensure your system is patched!. HTTP Daemon Vulnerability, Ubuntu Security Advisory, Request Smuggling Attack, libhttp-daemon-perl Exploit. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.