Read the docs
Red Hat Security Advisory

RHSA-2026:49758

perl-GD security update

Released 2026-08-03 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 1 record

TI-2026-09955 CVE-2026-11526 · GHSA-hx22-9fx3-xg77

OS command injection in RURBAN GD

Priority MEDIUM 52

GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01353 Published 2026-06-14 Partial fix · 2.86 CWE-73