UbuntuUpdates.org

Package "libgd-perl"

Name: libgd-perl

Description:

Perl module wrapper for libgd
Latest version: 2.76-2ubuntu0.1
Release: jammy (22.04)
Level: security
Repository: main
Homepage: https://github.com/lstein/Perl-GD

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libgd-perl"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libgd-perl" in Jammy

Repository Area Version
base main 2.76-2build1
updates main 2.76-2ubuntu0.1

Changelog

Version: 2.76-2ubuntu0.1 2026-06-30 13:07:36 UTC

  libgd-perl (2.76-2ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: command injection and file overwrite
    - debian/patches/CVE-2026-11526.patch: fix command injection via 2-arg
      open() in _make_filehandle in MANIFEST, lib/GD/Image.pm,
      lib/GD/Image_pm.PL, t/security_open.t.
    - CVE-2026-11526

 -- Marc Deslauriers <email address hidden> Tue, 16 Jun 2026 07:52:46 -0400
CVE-2026-11526 GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle. GD::Ima


About   -   Send Feedback to @ubuntu_updates