Skip to content
OpenAdvisories
Critical ELSA-2026-49758 1 CVE

Critical: perl-GD security update (Oracle Linux 7)

Published Sep 3, 2026 · Updated Sep 3, 2026

Ecosystem: Oracle Linux

Summary

[2.49-3.0.1]
- Security update for CVE-2026-11526 [Orabug: 39825996]

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 7 perl-GD 0:2.49-3.0.1.el7

Vulnerabilities 1

  • Critical 9.8
    CVE-2026-11526

    GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle

    GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle. GD::Image::_make_filehandle opens a filename argument with Perl's 2-arg open(), so a filename that begins or ends with…

    RURBAN GD libgd-perl perl-gd Debian Ubuntu Alpine