Back Linuxsecurity

Ubuntu 26.04 LTS libgd-perl Critical Command Execution Threat USN-8484

Linuxsecurity •LinuxSecurity Advisories • June 30, 2026

GD.pm could be made to run programs or overwrite files if it opened a specially crafted file. Software Description: - libgd-perl: Perl module wrapper for libgd Details: It was discovered that GD.pm incorrectly handled filename arguments. An attacker could possibly use this issue to execute arbitrary commands or overwrite files.

GD.pm could be made to run programs or overwrite files if it opened a

specially crafted file.

Software Description:

- libgd-perl: Perl module wrapper for libgd

It was discovered that GD.pm incorrectly handled filename arguments. An

attacker could possibly use this issue to execute arbitrary commands or

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS libgd-perl 2.84-2ubuntu0.1 Ubuntu 25.10 libgd-perl 2.78-1ubuntu0.25.10.1 Ubuntu 24.04 LTS libgd-perl 2.78-1ubuntu0.24.04.1 Ubuntu 22.04 LTS libgd-perl 2.76-2ubuntu0.1 In general, a standard system update will make all the necessary changes.

Ubuntu Security Notice USN-8484-1

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Command Execution Vulnerability in Ubuntu's libgd-perl (USN-8484-1) A critical vulnerability has been identified in the GD.pm Perl module within Ubuntu systems, allowing attackers to execute arbitrary commands or overwrite files by opening specially crafted files. The flaw arises from improper handling of filename arguments in GD.pm. Affected versions include libgd-perl 2.84-2ubuntu0.1 for Ubuntu 26.04 LTS and earlier versions down to 22.04 LTS. Users are advised to update their systems to mitigate this risk. The vulnerability has been classified under USN-8484-1, and a standard system update will apply the necessary patches. No active exploitation has been reported yet, but the potential for serious damage exists if left unaddressed. 2 sources 72

Extracted Entities

Ubuntu 26.04 LTS libgd-perl Critical Command Execution Threat USN-8484

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

Domains (1)

MITRE ATT&CK (1)