Ubuntu 26.04 LTS libgd-perl Critical Command Execution Threat USN-8484-1

ubuntu

June 30, 2026

GD.pm could be made to run programs or overwrite files if it opened a specially crafted file.

Summary

GD.pm could be made to run programs or overwrite files if it opened a

specially crafted file.

Software Description:

- libgd-perl: Perl module wrapper for libgd

Details:

It was discovered that GD.pm incorrectly handled filename arguments. An

attacker could possibly use this issue to execute arbitrary commands or

overwrite files.

Topics Covered

security advisory critical command execution file overwrite Ubuntu libgd-perl

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libgd-perl                      2.84-2ubuntu0.1

Ubuntu 25.10
  libgd-perl                      2.78-1ubuntu0.25.10.1

Ubuntu 24.04 LTS
  libgd-perl                      2.78-1ubuntu0.24.04.1

Ubuntu 22.04 LTS
  libgd-perl                      2.76-2ubuntu0.1

In general, a standard system update will make all the necessary changes.