ELSA-2026-36188

ELSA-2026-36188 - perl-HTTP-Daemon security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-07

Description

[6.01-24]
- Fix CVE-2026-8450: send_file() shell-magic injection via 2-arg open()
- Resolves: RHEL-184825

Related CVEs

CVE-2026-8450

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	perl-HTTP-Daemon-6.01-24.el8_10.src.rpm	0bc314dfe222bd957a9b0e00b7af6579305efe653a9492192febe3fc65d70e62	-	ol8_aarch64_codeready_builder
	perl-HTTP-Daemon-6.01-24.el8_10.noarch.rpm	7535fb1ca856ee798925c85a21a70765bf4d91599be79317b3539fa619b3054d	-	ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64)	perl-HTTP-Daemon-6.01-24.el8_10.src.rpm	0bc314dfe222bd957a9b0e00b7af6579305efe653a9492192febe3fc65d70e62	-	ol8_x86_64_codeready_builder
	perl-HTTP-Daemon-6.01-24.el8_10.noarch.rpm	7535fb1ca856ee798925c85a21a70765bf4d91599be79317b3539fa619b3054d	-	ol8_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team