[SECURITY] Fedora 42 Update: perl-5.40.2-518.fc42

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

PT-2025-29337 · Undefined · Undefined

🔴 Urgent Fedora 42 Alert: A critical Perl vulnerability CVE-2025-30244ebfc7 allows remote code execution via regex exploits. Patch now or risk supply-chain breaches. Read more: 👉 https://t.co/is44pekhed LinuxSecurity DevOps CyberRisk https://t.co/YIkx08S1R4...

Fedora 42 : perl (2025-30244ebfc7)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-30244ebfc7 advisory. Fixes CVE-2025-40909 - Clone dirhandles without fchdir Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

The vulnerability of the `open()` function in the YAML-LibYAML Perl programming language interpreter allows a malicious actor to gain unauthorized access and modify any file.

The vulnerability of the open function in the YAML-LibYAML Perl programming language interpreter involves the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to and modify a...

Security update for perl-YAML-LibYAML

This update for perl-YAML-LibYAML fixes the following issues: CVE-2025-40908: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified bsc1243902 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2025:01885-2 Security update for perl-YAML-LibYAML

This update for perl-YAML-LibYAML fixes the following issues: - CVE-2025-40908: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified bsc1243902...

perl-File-Find-Rule security update

0.33-5.0.1 - Use 3 arg open in grep Orabug: 38120380CVE-2011-10007...

ROS-20250710-05

The vulnerability in the Perl programming language is due to the fact that the software uses the function rand as the default entropy source, which is not cryptographically secure. Exploitation of the vulnerability could allow an attacker to bypass the implemented security restrictions...

Oracle Linux 7 : perl-File-Find-Rule (ELSA-2025-9741)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9741 advisory. 0.33-5.0.1 - Use 3 arg open in grep Orabug: 38120380CVE-2011-10007 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Ubuntu: Security Advisory (USN-7632-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7632-1 libyaml-libyaml-perl vulnerability

It was discovered that YAML-LibYAML incorrectly handled certain file names. An attacker could possibly use this issue to overwrite arbitrary files...

Oracle Linux 7 : perl-File-Find-Rule-Perl (ELSA-2025-9740)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9740 advisory. 1.13-2.0.1 - Use 3 arg open in grep Orabug: 38120371CVE-2011-10007 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Multiple vulnerabilities detected in PostgreSQL

Multiple PostgreSQL vulnerability updates CVE-2025-1094-PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation CVE-2024-10979-PostgreSQL PL/Perl environment variable changes execute arbitrary code CVE-2024-10978-PostgreSQL SET ROLE, SET SESSION AUTHORIZATI...

perl-File-Find-Rule-Perl security update

1.13-2.0.1 - Use 3 arg open in grep Orabug: 38120371CVE-2011-10007...

Ubuntu: Security Advisory (USN-7620-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

perl-File-Find-Rule-0.350.0-1.1 on GA media (moderate)

perl-File-Find-Rule-0.350.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15260-1 Rating: moderate Cross-References: CVE-2011-10007 CVSS scores: CVE-2011-10007 SUSE : 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2011-10007 SUSE : 8.6...

perl-YAML-LibYAML-0.904.0-2.1 on GA media (moderate)

perl-YAML-LibYAML-0.904.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15261-1 Rating: moderate Cross-References: CVE-2025-40908 CVSS scores: CVE-2025-40908 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2025-40908 SUSE : 8.3...

perl-CryptX-0.87.0-1.1 on GA media (moderate)

perl-CryptX-0.87.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15259-1 Rating: moderate Cross-References: CVE-2025-40914 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

perl-32bit-5.40.2-3.1 on GA media (moderate)

perl-32bit-5.40.2-3.1 on GA media Announcement ID: openSUSE-SU-2025:15258-1 Rating: moderate Cross-References: CVE-2025-40909 CVSS scores: CVE-2025-40909 SUSE : 6.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now ...

AlmaLinux 9 : perl-FCGI (ALSA-2025:8635)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:8635 advisory. perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 aka fcgi library CVE-2025-40907 Tenable has extracted the...