Important: perl-GD

Issue Overview: command injection via 2-arg open in makefilehandle CVE-2026-11526 Affected Packages: perl-GD Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum...

CVE-2026-11527

Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open of the -file argument in makefilehandle. Config::IniFiles::makefilehandle opens a filename argument with Perl's 2-arg open, so a filename that begins or ends with a pipe "| cmd", "cmd...

CVE-2026-11527

The Config::IniFiles Perl module (versions before 3.001000 ) contains a vulnerability where the _make_filehandle function incorrectly handles the -file argument. Because it uses Perl's 2-arg open() , providing a filename starting or ending with a pipe (e.g., | cmd) or starting with a redirect (e....

CVE-2026-11526

The perl-GD library (versions before 2.86 ) for Perl is vulnerable to OS command injection and file overwrite via the _make_filehandle function. The root cause is the use of Perl's 2-arg open() on filename arguments; if an attacker provides a filename starting or ending with a pipe (e.g., | cmd) ...