Alerts This Week
Warning Icon 1 690
Alerts This Week
Warning Icon 1 690

Debian LTS DLA-4637-1 libconfig-inifiles-perl Critical Arbitrary Exec

debian lts
Calendar Grey June 19, 2026
Dist Debian Esm H88
Address critical flaw in libconfig-inifiles-perl that allows command execution and file overwrites in Debian LTS systems.
A flaw was discovered in libconfig-inifiles-perl, a Perl module to read .ini-style configuration files, which may result in the execution of arbitrary shell commands or file overwr...
Topics%20covered

Topics Covered

security advisory file overwrite arbitrary commands execution libconfig-inifiles-perl deblts

Summary

For Debian 11 bullseye, this problem has been fixed in version
3.000003-1+deb11u1.

For Debian 12 bookworm, this problem has been fixed in version
3.000003-2+deb12u1.

We recommend that you upgrade your libconfig-inifiles-perl packages.

For the detailed security status of libconfig-inifiles-perl please refer
to its security tracker page at:
https://security-tracker.debian.org/tracker/libconfig-inifiles-perl

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: libconfig-inifiles-perl
Version: 3.000003-1+deb11u1 3.000003-2+deb12u1
CVE ID: CVE-2026-11527

Topics%20covered

Topics Covered

security advisory file overwrite arbitrary commands execution libconfig-inifiles-perl deblts

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here