Ubuntu alert USN-8445-1 (libconfig-inifiles-perl)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8445-1] Config-IniFiles vulnerability
Date:
             
 
Wed, 17 Jun 2026 15:52:11 +0000
Message-ID:
             
 
<E1wZsYl-0008LA-Pz@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8445-1
June 17, 2026

libconfig-inifiles-perl vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Config-IniFiles could be made to run commands or overwrite files if it
received specially crafted input.

Software Description:
- libconfig-inifiles-perl: Perl module for working with INI configuration files

Details:

It was discovered that Config-IniFiles incorrectly handled the -file
argument in certain situations. An attacker could possibly use this issue
to execute arbitrary commands or overwrite arbitrary files.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libconfig-inifiles-perl         3.000003-4ubuntu0.1

Ubuntu 25.10
  libconfig-inifiles-perl         3.000003-3ubuntu0.1

Ubuntu 24.04 LTS
  libconfig-inifiles-perl         3.000003-2ubuntu0.1

Ubuntu 22.04 LTS
  libconfig-inifiles-perl         3.000003-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8445-1
  CVE-2026-11527

Package Information:
  https://launchpad.net/ubuntu/+source/libconfig-inifiles-p...
  https://launchpad.net/ubuntu/+source/libconfig-inifiles-p...
  https://launchpad.net/ubuntu/+source/libconfig-inifiles-p...
  https://launchpad.net/ubuntu/+source/libconfig-inifiles-p...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=OEDB
-----END PGP SIGNATURE-----