Important: perl-GD

Issue Overview: command injection via 2-arg open in makefilehandle CVE-2026-11526 Affected Packages: perl-GD Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum...

CVE-2026-11527

The Config::IniFiles Perl module (versions before 3.001000 ) is vulnerable to OS command injection and file overwrite due to the insecure use of Perl's 2-arg open() function within the _make_filehandle helper. Specifically, if the -file argument is provided with a filename starting or ending with...

CVE-2026-11527

Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open of the -file argument in makefilehandle. Config::IniFiles::makefilehandle opens a filename argument with Perl's 2-arg open, so a filename that begins or ends with a pipe "| cmd", "cmd...

CVE-2026-11526

The perl-GD library (versions before 2.86 ) is vulnerable to OS command injection and file overwrite due to the insecure use of Perl's 2-arg open() function within _make_filehandle. An attacker providing untrusted input to constructors like new, newFromPng, or newFromJpeg can execute arbitrary co...