HTTP-Date vulnerability
Published: Thu, 23 Jul 2026 14:30
Summary
HTTP-Date could be made to crash if it received specially crafted input.
Details
It was discovered that HTTP-Date incorrectly handled parsing certain date strings. An attacker could possibly use this issue to cause HTTP-Date to use excessive resources, leading to a denial of service.
Recommended actions per Ubuntu release
StackPatch playbook auto-generated per release codename and per affected package.
Ubuntu jammy
libhttp-date-perl→6.05-1ubuntu0.1apt_upgradeStandard apt upgrade. Install 6.05-1ubuntu0.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libhttp-date-perl
Most apt upgrades restart their service automatically. needrestart lists anything else.
libhttp-date-perl→6.05-1ubuntu0.1apt_upgradeStandard apt upgrade. Install 6.05-1ubuntu0.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libhttp-date-perl
Most apt upgrades restart their service automatically. needrestart lists anything else.
Ubuntu noble
libhttp-date-perl→6.06-1ubuntu0.24.04.1apt_upgradeStandard apt upgrade. Install 6.06-1ubuntu0.24.04.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libhttp-date-perl
Most apt upgrades restart their service automatically. needrestart lists anything else.
libhttp-date-perl→6.06-1ubuntu0.24.04.1apt_upgradeStandard apt upgrade. Install 6.06-1ubuntu0.24.04.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libhttp-date-perl
Most apt upgrades restart their service automatically. needrestart lists anything else.
Ubuntu resolute
libhttp-date-perl→6.06-1ubuntu0.26.04.1apt_upgradeStandard apt upgrade. Install 6.06-1ubuntu0.26.04.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libhttp-date-perl
Most apt upgrades restart their service automatically. needrestart lists anything else.
libhttp-date-perl→6.06-1ubuntu0.26.04.1apt_upgradeStandard apt upgrade. Install 6.06-1ubuntu0.26.04.1 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y libhttp-date-perl
Most apt upgrades restart their service automatically. needrestart lists anything else.
Are YOU affected by USN-8599-1?
5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether USN-8599-1 (and any other live CVE) applies. Anonymous, no signup.
curl https://mindsparkstack.com/scan.sh | bash
StackPatch runs this match against YOUR installed packages every hour
Free (3 servers) / from $9/mo (14-day free trial) / Solo $9/mo / Pro $29/mo / Team $79/mo. Indie pricing.