Debian Packages Face Critical Shell Command Execution Vulnerabilities

Linuxsecurity

Debian Packages Face Critical Shell Command Execution Vulnerabilities

First seen 21 Jun 2026, 19:03 UTC • •74.0

Article Content

1 / 5

Browse articles

ThreatCluster •June 22, 2026 at 18:53 UTC

•Critical vulnerabilities in libhttp-daemon-perl and libgd-perl allow shell command execution.
•Debian 11 and 12 users are urged to upgrade to patched versions immediately.
•Both vulnerabilities have been assigned DLA-4639 and DLA-4638 advisories, respectively.

Debian has issued security advisories for critical vulnerabilities in libhttp-daemon-perl and libgd-perl, affecting versions in Debian 11 (bullseye) and Debian 12 (bookworm). The libhttp-daemon-perl vulnerability (DLA-4639) allows shell command execution, patched in versions 6.12-1+deb11u2 for bullseye and 6.16-1+deb13u1~deb12u1 for bookworm. Similarly, the libgd-perl flaw (DLA-4638) also permits shell command execution, with fixes in versions 2.73-1+deb11u1 for bullseye and 2.76-4+deb12u1 for bookworm. Users are strongly advised to upgrade their packages to mitigate potential exploitation. The vulnerabilities pose significant risks to systems running these libraries, particularly in web applications. Current status indicates that patches are available and users should apply them immediately.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 91d ago How this analysis works

Timeline

2026-06-21

Debian security advisories released

Debian announced critical vulnerabilities in libhttp-daemon-perl and libgd-perl, urging users to upgrade their packages.

2026-06-21

Patch for libhttp-daemon-perl issued

Debian released version 6.12-1+deb11u2 for bullseye and 6.16-1+deb13u1~deb12u1 for bookworm to fix the vulnerability.

2026-06-21

Patch for libgd-perl issued

Debian released version 2.73-1+deb11u1 for bullseye and 2.76-4+deb12u1 for bookworm to address the flaw.

More articles in this cluster (4)

Threat Graph

3 entities, 2 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Weakness (1)

CWE-78 - OS Command Injection

Affected Platform (1)

Linux

Vulnerability (1)

Exec Command Flaw

Relationships

Exec Command Flaw targets Linux
Exec Command Flaw related to CWE-78 - OS Command Injection

Continue Reading

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…