SUSE SLES12 Security Update : perl-YAML-LibYAML (SUSE-SU-2025:01885-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:01885-1 advisory. - CVE-2025-40908: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified bsc1243902 Tenable has extracted the...

GLSA-202506-11 : YAML-LibYAML: Shell injection

The remote host is affected by the vulnerability described in GLSA-202506-11 YAML-LibYAML: Shell injection YAML-LibYAML uses the legacy '2-arg' open call which is susceptible to shell injection via malicious filenames. Tenable has extracted the preceding description block directly from the Gentoo...

Oracle Linux 9 : perl-YAML-LibYAML (ELSA-2025-9330)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9330 advisory. 1:0.82-6.1 - Use 3-arg form of open in LoadFile CVE-2025-40908 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : perl-YAML-LibYAML (ELSA-2025-9329)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9329 advisory. 1:0.70-2 - Use 3-arg form of open in LoadFile CVE-2025-40908 Tenable has extracted the preceding description block directly from the Oracle Linux security...

perl-YAML-LibYAML security update

1:0.70-2 - Use 3-arg form of open in LoadFile CVE-2025-40908...

RHSA-2025:9338 Red Hat Security Advisory: perl-YAML-LibYAML security update

Bulletin has no description...

RHSA-2025:9330 Red Hat Security Advisory: perl-YAML-LibYAML security update

Bulletin has no description...

RHSA-2025:9329 Red Hat Security Advisory: perl-YAML-LibYAML security update

Bulletin has no description...

Important: Red Hat Security Advisory: perl-YAML-LibYAML security update

An update for perl-YAML-LibYAML is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

yaml-libyaml: LibYAML Perl File Modification Vulnerability

A flaw was found in yaml-libyaml. The component uses a two-argument open function when parsing YAML files, which allows an attacker to modify existing files on the system. This flaw allows a local attacker to provide a crafted YAML file as input. This issue can result in unauthorized modification...

Important: Red Hat Security Advisory: perl-YAML-LibYAML security update

An update for perl-YAML-LibYAML is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

yaml-libyaml: LibYAML Perl File Modification Vulnerability

A flaw was found in yaml-libyaml. The component uses a two-argument open function when parsing YAML files, which allows an attacker to modify existing files on the system. This flaw allows a local attacker to provide a crafted YAML file as input. This issue can result in unauthorized modification...

Important: Red Hat Security Advisory: perl-YAML-LibYAML security update

An update for perl-YAML-LibYAML is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

perl-YAML-LibYAML security update

1:0.82-6.1 - Use 3-arg form of open in LoadFile CVE-2025-40908...

ALSA-2025:9329 Important: perl-YAML-LibYAML security update

Kirill Siminov's "libyaml" is arguably the best YAML implementation. The C library is written precisely to the YAML 1.1 specification. It was originally bound to Python and was later bound to Ruby. Security Fixes: yaml-libyaml: LibYAML Perl File Modification Vulnerability CVE-2025-40908 For more...

Important: perl-YAML-LibYAML security update

Kirill Siminov's "libyaml" is arguably the best YAML implementation. The C library is written precisely to the YAML 1.1 specification. It was originally bound to Python and was later bound to Ruby. Security Fixes: yaml-libyaml: LibYAML Perl File Modification Vulnerability CVE-2025-40908 For more...

Medium: perl-YAML-LibYAML

Issue Overview: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified CVE-2025-40908 Affected Packages: perl-YAML-LibYAML Issue Correction: Run dnf update perl-YAML-LibYAML --releasever 2023.7.20250623 or dnf update --advisory ALAS2023-2025-1036...

Amazon Linux 2023 : perl-YAML-LibYAML (ALAS2023-2025-1036)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1036 advisory. YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified CVE-2025-40908 Tenable has extracted the preceding description block directly from the tested product...

Medium: perl-YAML-LibYAML

Issue Overview: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified CVE-2025-40908 Affected Packages: perl-YAML-LibYAML Issue Correction: Run dnf update perl-YAML-LibYAML --releasever 2023.7.20250623 to update your system. New Packages: aarch64: ...

RHEL 8 : perl-YAML-LibYAML (RHSA-2025:9329)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:9329 advisory. Kirill Siminov's libyaml is arguably the best YAML implementation. The C library is written precisely to the YAML 1.1 specification. It was originall...