Ubuntu 26.04 Config-IniFiles Critical Command Exec Threat USN-8445-1

ubuntu

June 17, 2026

Config-IniFiles could be made to run commands or overwrite files if it received specially crafted input.

Summary

Config-IniFiles could be made to run commands or overwrite files if it

received specially crafted input.

Software Description:

- libconfig-inifiles-perl: Perl module for working with INI configuration files

Details:

It was discovered that Config-IniFiles incorrectly handled the -file

argument in certain situations. An attacker could possibly use this issue

to execute arbitrary commands or overwrite arbitrary files.

Topics Covered

security advisory critical command execution file overwrite Ubuntu libconfig-inifiles-perl

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libconfig-inifiles-perl         3.000003-4ubuntu0.1

Ubuntu 25.10
  libconfig-inifiles-perl         3.000003-3ubuntu0.1

Ubuntu 24.04 LTS
  libconfig-inifiles-perl         3.000003-2ubuntu0.1

Ubuntu 22.04 LTS
  libconfig-inifiles-perl         3.000003-1ubuntu0.1

In general, a standard system update will make all the necessary changes.