Mageia Security Updates Address Critical Perl Vulnerabilities

Mageia has released security updates for two significant vulnerabilities affecting Perl packages. CVE-2026-8594, published on May 30, 2026, impacts Text::LineFold versions through 2019.001, allowing for output duplication based on special break characters. CVE-2026-11526, published on June 14, 2026, affects GD versions before 2.86, enabling OS command injection and file overwrite through improper handling of filename arguments. Both vulnerabilities pose risks to systems running affected versions of these Perl packages. Users are advised to update their systems promptly to mitigate potential exploits. The vulnerabilities were confirmed by Mageia's advisory updates on August 3, 2026.

Key Points: • CVE-2026-8594 allows output duplication in Perl's Text::LineFold package. • CVE-2026-11526 enables OS command injection in Perl's GD package. • Mageia advises immediate updates to mitigate risks from these vulnerabilities.