Back Linuxsecurity

Debian libhttp-daemon-perl Important Exec Command Flaw DSA-6358

Linuxsecurity •LinuxSecurity Advisories • June 21, 2026

For the stable distribution (trixie), this problem has been fixed in version 6.16-1+deb13u1. We recommend that you upgrade your libhttp-daemon-perl packages. For the detailed security status of libhttp-daemon-perl please refer to its security tracker page at: Further information Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at:

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Debian Packages Face Critical Shell Command Execution Vulnerabilities Debian has issued security advisories for critical vulnerabilities in libhttp-daemon-perl and libgd-perl, affecting versions in Debian 11 (bullseye) and Debian 12 (bookworm). The libhttp-daemon-perl vulnerability (DLA-4639) allows shell command execution, patched in versions 6.12-1+deb11u2 for bullseye and 6.16-1+deb13u1~deb12u1 for bookworm. Similarly, the libgd-perl flaw (DLA-4638) also permits shell command execution, with fixes in versions 2.73-1+deb11u1 for bullseye and 2.76-4+deb12u1 for bookworm. Users are strongly advised to upgrade their packages to mitigate potential exploitation. The vulnerabilities pose significant risks to systems running these libraries, particularly in web applications. Current status indicates that patches are available and users should apply them immediately. 4 sources 74

Extracted Entities

Debian libhttp-daemon-perl Important Exec Command Flaw DSA-6358

The full story

Extracted Entities

CWE Weaknesses (1)

Platforms (1)

Vulnerabilities (1)