https://bugzilla.redhat.com/show_bug.cgi?id=2508451
Bug ID: 2508451
Summary: CVE-2026-11526 perl-GD: perl-GD: Arbitrary command
execution and file overwrite via crafted filenames
[epel-all]
Product: Fedora EPEL
Version: epel10
Status: NEW
Whiteboard: {"flaws": ["48bd7604-355b-4662-b538-bbb634f76078"]}
Component: perl-GD
Keywords: Security, SecurityTracking
Severity: urgent
Priority: urgent
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected], [email protected],
[email protected]
Blocks: 2488744
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
GD versions before 2.86 for Perl allow OS command injection and file overwrite
via a 2-arg open() of filename arguments in _make_filehandle.
GD::Image::_make_filehandle opens a filename argument with Perl's 2-arg open(),
so a filename that begins or ends with a pipe ("| cmd", "cmd |") or begins with
a redirect ("> path", ">> path") is run as a command or redirect rather than
opened as a file. _make_filehandle is the single open path behind every
filename-accepting constructor (new, newFromPng, newFromJpeg, and the rest);
the in-memory *Data variants do not open a path and are unaffected.
Any caller that forwards untrusted input to one of these constructors as a
pathname can run an arbitrary command or truncate a file under the process UID.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2508451
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202508451%23c0
--
_______________________________________________
perl-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
