Back Linuxsecurity

Fedora 44 perl-Config-IniFiles Important Security Fix CVE-2026

Linuxsecurity •LinuxSecurity Advisories • June 20, 2026

* Thu Jun 11 2026 Xavier Bachelot - 3.001000-1 - Update to 3.001000 (RHBZ#2487822) - Fixes CVE-2026-11527

Fedora Update Notification FEDORA-2026-1c2676703e 2026-06-20 00:50:40.883538+00:00 Name : perl-Config-IniFiles Product : Fedora 44 Version : 3.001000 Release : 1.fc44 URL : Summary : A module for reading .ini-style configuration files Description : Config::IniFiles provides a way to have readable configuration files outside your Perl script. Configurations can be imported (inherited, stacked,...), sections can be grouped, and settings can be accessed from a tied hash.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1c2676703e' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Command Execution Vulnerability in Config-IniFiles Affects Ubuntu and Fedora A critical security vulnerability has been identified in the Config-IniFiles Perl module, affecting multiple Ubuntu releases and Fedora 44. The flaw allows attackers to execute arbitrary commands or overwrite files through specially crafted input. Specifically, Ubuntu versions 26.04 LTS, 25.10, 24.04 LTS, and 22.04 LTS are impacted, as well as Fedora 44. The vulnerability is tracked as CVE-2026-11527, which was published on June 14, 2026. Users are advised to update their systems to mitigate the risk. The issue was confirmed by security notices from both Ubuntu and Fedora. The updates for Ubuntu were released on June 17, 2026, while Fedora's update was made available on June 20, 2026. This vulnerability poses a significant risk to systems using the affected versions. 2 sources 73

Extracted Entities

CVEs (1)

CVE-2026-11527