Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 292 articles for you...
203
security advisorycriticalfile overwriteMageia perl-Config-IniFiles Important Command Injection Fix CVE-2026-11527
Security update. Publication date: 18 Jul 2026 URL: https://advisories.mageia.org/MGASA-2026-0263.html Type: security Affected Mageia releases: 10, 9 CVE: CVE-2026-11527 Description: The updated package fixes a security vulnerability: Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle. (CVE-2026-11527) References: - https://bugs.mageia.org/show_bug.cgi?id=35701 - https://www.openwall.com/lists/oss-security/2026/06/14/5 - https://metacpan.org/release/SHLOMIF/Config-IniFiles-3.001000/changes - https://ubuntu.com/security/notices/USN-8445-1 - https://lists.debian.org/debian-security-announce/2026/msg00265.html - https://lists.fedoraproject.org/archives/list/
Jul 18, 2026
•Critical
Mageia
172
security advisoryfile overwriteUbuntuUbuntu 26.04 Tar Important File Overwrite Issue USN-8510-1 CVE-2025-45582
tar could be made to overwrite files.. ========================================================================== Ubuntu Security Notice USN-8510-1 July 06, 2026 tar vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: tar could be made to overwrite files. Software Description: - tar: GNU tar archive utility Details: It was discovered that tar incorrectly handled symlinks when extracting archives. An attacker could possibly use this issue to overwrite arbitrary files. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS tar 1.35+dfsg-4ubuntu0.2 Ubuntu 24.04 LTS tar 1.35+dfsg-3ubuntu0.2 Ubuntu 22.04 LTS tar 1.34+dfsg-1ubuntu0.1.22.04.4 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8510-1 CVE-2025-45582 Package Information: https://launchpad.net/ubuntu/+source/tar/1.35+dfsg-4ubuntu0.2 https://launchpad.net/ubuntu/+source/tar/1.35+dfsg-3ubuntu0.2 https://launchpad.net/ubuntu/+source/tar/1.34+dfsg-1ubuntu0.1.22.04.4 . Critical update for Ubuntu regarding tar file overwrite issue. Details on severity and system patches included.. Ubuntu Security Update, tar Package, File Overwrite Risk. . Severity: Important. LinuxSecurity.com Team
Jul 06, 2026
•Important
Ubuntu
100
security advisorySuSEfile overwriteSUSE Perl-Config-IniFiles Important OS Command Injection Vuln 2026-22329-1
An update that solves one vulnerability can now be installed.. # Security update for perl-Config-IniFiles Announcement ID: SUSE-SU-2026:22329-1 Release Date: 2026-06-22T14:30:38Z Rating: important References: * bsc#1268236 Cross-References: * CVE-2026-11527 CVSS scores: * CVE-2026-11527 ( SUSE ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11527 ( NVD ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for perl-Config-IniFiles fixes the following issue * CVE-2026-11527: OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle (bsc#1268236). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1024=1 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1024=1 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * perl-Config-IniFiles-3.000003-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * perl-Config-IniFiles-3.000003-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-11527.html * https://bugzilla.suse.com/show_bug.cgi?id=1268236 . This advisory covers a critical OS command injection and file overwrite in SUSE's perl-Config-IniFiles requiring urgent action.. SUSE Advisory, Perl Configuration, OS Command Injection, File Overwrite, Security Update. . Severity: Important. LinuxSecurity.com Team
Jul 01, 2026
•Important
SuSE
100
security advisorySuSEfile overwriteSUSE Perl-Config-IniFiles Important OS Command Injection Fix 2026-2710-1
An update that solves one vulnerability can now be installed.. # Security update for perl-Config-IniFiles Announcement ID: SUSE-SU-2026:2710-1 Release Date: 2026-06-30T10:57:22Z Rating: important References: * bsc#1268236 Cross-References: * CVE-2026-11527 CVSS scores: * CVE-2026-11527 ( SUSE ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11527 ( NVD ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for perl-Config-IniFiles fixes the following issue * CVE-2026-11527: OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle (bsc#1268236). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2710=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2710=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2710=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2710=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2710=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2710=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2710=1 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-2710=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2710=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2710=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2710=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * perl-Config-IniFiles-2.94-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * perl-Config-IniFiles-2.94-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * perl-Config-IniFiles-2.94-150000.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * perl-Config-IniFiles-2.94-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * perl-Config-IniFiles-2.94-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15SP5 (noarch) * perl-Config-IniFiles-2.94-150000.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * perl-Config-IniFiles-2.94-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * perl-Config-IniFiles-2.94-150000.3.3.1 * Development Tools Module 15-SP7 (noarch) * perl-Config-IniFiles-2.94-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * perl-Config-IniFiles-2.94-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * perl-Config-IniFiles-2.94-150000.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-11527.html * https://bugzilla.suse.com/show_bug.cgi?id=1268236 . Security update for perl-Config-IniFiles addresses an important security flaw involving OS command injection in SUSE distributions.. perl Config IniFiles security update, SUSE Linux patch, Important security vulnerabilities, OS command injection mitigation. . Severity: Important. LinuxSecurity.com Team
Jun 30, 2026
•Important
SuSE
172
security advisorycriticalcommand executionUbuntu 26.04 LTS libgd-perl Critical Command Execution Threat USN-8484-1
GD.pm could be made to run programs or overwrite files if it opened a specially crafted file.. ========================================================================== Ubuntu Security Notice USN-8484-1 June 30, 2026 libgd-perl vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: GD.pm could be made to run programs or overwrite files if it opened a specially crafted file. Software Description: - libgd-perl: Perl module wrapper for libgd Details: It was discovered that GD.pm incorrectly handled filename arguments. An attacker could possibly use this issue to execute arbitrary commands or overwrite files. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS libgd-perl 2.84-2ubuntu0.1 Ubuntu 25.10 libgd-perl 2.78-1ubuntu0.25.10.1 Ubuntu 24.04 LTS libgd-perl 2.78-1ubuntu0.24.04.1 Ubuntu 22.04 LTS libgd-perl 2.76-2ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8484-1 CVE-2026-11526 Package Information: https://launchpad.net/ubuntu/+source/libgd-perl/2.84-2ubuntu0.1 https://launchpad.net/ubuntu/+source/libgd-perl/2.78-1ubuntu0.25.10.1 https://launchpad.net/ubuntu/+source/libgd-perl/2.78-1ubuntu0.24.04.1 https://launchpad.net/ubuntu/+source/libgd-perl/2.76-2ubuntu0.1 . GD.pm contains a critical issue that could allow arbitrary command execution or file overwrite if misused. Update now.. libgd-perl, command execution, file overwrite, Ubuntu advisory. . Severity: Critical. LinuxSecurity.com Team
Jun 30, 2026
•Critical
Ubuntu
202
security advisoryfile overwriteimportantopenSUSE perl-Config-IniFiles Important Command Injection Fix 2026-21012-1
An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for perl-config-inifiles ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21012-1 Rating: important References: * bsc#1268236 Cross-References: * CVE-2026-11527 CVSS scores: * CVE-2026-11527 ( SUSE ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for perl-Config-IniFiles fixes the following issue - CVE-2026-11527: OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle (bsc#1268236). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-1024=1 Package List: - openSUSE Leap 16.0: perl-Config-IniFiles-3.000003-160000.3.1 References: * https://www.suse.com/security/cve/CVE-2026-11527.html . A critical update for openSUSE addresses an important security issue in perl-Config-IniFiles, enhancing system robustness.. openSUSE security, perl-Config-IniFiles update, OS command injection, security patch. . Severity: Important. LinuxSecurity.com Team
Jun 30, 2026
•Important
OpenSUSE
100
security advisorySuSEdirectory traversalSUSE Tar Important File Overwrite Issue Advisory 2026-2615-1 CVE-2025-45582
An update that solves one vulnerability and contains one feature can now be installed.. # Security update for tar Announcement ID: SUSE-SU-2026:2615-1 Release Date: 2026-06-24T09:02:40Z Rating: important References: * bsc#1246399 * jsc#PED-16073 Cross-References: * CVE-2025-45582 CVSS scores: * CVE-2025-45582 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-45582 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-45582 ( NVD ): 4.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for tar fixes the following issues: Upgrade tar to version 1.34 (jsc#PED-16073). Security issues fixed: * CVE-2025-45582: file overwrite via directory traversal in crafted TAR archives (bsc#1246399). Other updates and bugfixes: * Changes from 1.28: * New --one-top-level option: extract all files into a subdirectory named after the archive base name * New --sort option: sort directory entries by name or inode when creating archives * New exclusion options: --exclude-ignore, --exclude-ignore-recursive, and --exclude-vcs-ignores * New checkpoint action: totals; extended checkpoint format specifiers * Official tar(1) and rmt(8) manpages now provided upstream * Refuse to read from or write archives to a tty device * Changes from 1.29: * New --verbatim-files-from option: treat each line in a file list as a literal file name regardless of leading dashes * Changes from 1.30: * Member names containing '..' components are now skipped on extraction (security hardening) * Erroneous use ofposition-sensitive options is now reported * \--numeric-owner now applies to private (pax) headers too * Fixed --delay-directory-restore in several edge cases * New --warnings=failed-read option to suppress unreadable-file warnings when combined with --ignore-failed-read * Changes from 1.32: * POSIX extended format headers no longer include PID by default * Wildcards in --exclude-vcs-ignore mode no longer match slashes * Fixed --no-overwrite-dir option * Fixed handling of chained renames in incremental backups * Link counting works for file names supplied via -T * Changes from 1.33: * Fix extraction over pipe * Fix memory leak in read_header * Fix extraction when . and .. are unreadable * Gracefully handle duplicate symlinks when extracting * Re-initialise supplementary groups when switching to user privileges ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-2615=1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2615=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * tar-debugsource-1.34-15.27.1 * tar-debuginfo-1.34-15.27.1 * tar-1.34-15.27.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * tar-lang-1.34-15.27.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * tar-debugsource-1.34-15.27.1 * tar-debuginfo-1.34-15.27.1 * tar-1.34-15.27.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * tar-lang-1.34-15.27.1 ## References: * https://www.suse.com/security/cve/CVE-2025-45582.html * https://bugzilla.suse.com/show_bug.cgi?id=1246399 * https://jira.suse.com/browse/PED-16073 . A security updatefor tar addresses an important file overwrite issue via directory traversal. Install to safeguard your systems.. SUSE update tar security important file overwrite. . Severity: Important. LinuxSecurity.com Team
Jun 24, 2026
•Important
SuSE
197
security advisoryfile overwritearbitrary command executionDebian libhttp-daemon-perl Critical Shell Command Execution DLA-4639-1
A flaw was discovered in libhttp-daemon-perl, a simple http server class for Perl, which may result in the execution of arbitrary shell commands or file overwrite when processing specially crafted input. For Debian 11 bullseye, this problem has been fixed in version 6.12-1+deb11u2.. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4639-1
Jun 21, 2026
•Critical
Debian LTS
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!