OESA-2025-1646 perl-File-Find-Rule security update

File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories. Security Fixes: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened...

SUSE-SU-2025:02027-1 Security update for perl

This update for perl fixes the following issues: - CVE-2025-40909: Do not change the current directory when cloning an open directory handle bsc1244079...

perl-FCGI:0.78 security update

perl-FCGI 1:0.78-12 - Fix CVE-2025-40907 integer overflow when parsing FastCGI parameters perl-FCGI 1:0.78-12 - Fix CVE-2025-40907 integer overflow when parsing FastCGI parameters perl-FCGI 1:0.78-12 - Fix CVE-2025-40907 integer overflow when parsing FastCGI parameters perl-FCGI 1:0.78-12 - Fix...

CLSA-2025-1750165585 perl: Fix of CVE-2020-16156

CVE-2020-16156: fix signature verification bypass...

Denial Of Service (DoS)

libtomcrypt.so, is vulnerable to integer overflow. The vulnerability is due to an integer overflow flaw in the embedded libtommath library used by Perl CryptX, which allows an attacker to trigger a crash or cause unexpected behavior, potentially leading to Denial of Service DoS...

Alibaba Cloud Linux 3 : 0088: perl-FCGI:0.78 (ALINUX3-SA-2025:0088)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0088 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-40907: FCGI versions 0.44 through 0.82, fo...

Astra Linux – Vulnerability in Perl

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38, and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand side of the tr operator, Sdotransinvmap can overflow the destination...

Astra Linux – Vulnerability in Perl

Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any...

Astra Linux – Vulnerability in libfile-find-rule-perl

File::Find::Rule in Perl version 0.34 is vulnerable to arbitrary code execution when grep encounters a crafted filename. A file handle is opened using the 2-argument form of open, allowing an attacker-controlled filename to specify the MODE parameter, thereby turning the filename into an executab...

Astra Linux – Vulnerability in libyaml-libyaml-perl

YAML-LibYAML before version 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...

CVE-2025-40916

Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha. That version uses the built-in rand function for generating the captcha text as well as image noise, which is insecure...

CVE-2025-40916 Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text

Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha. That version uses the built-in rand function for generating the captcha text as well as image noise, which is insecure...

TencentOS Server 4: perl-CPAN (TSSA-2024:0859)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0859 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 3: perl-Encode (TSSA-2022:0184)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0184 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 4: perl (TSSA-2025:0388)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0388 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: perl-Module-ScanDeps (TSSA-2024:1011)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1011 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 3: perl:5.32 (TSSA-2024:0782)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0782 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 3: perl (TSSA-2022:0171)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0171 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2022-4976

Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilities. The bundled library is affected by CVE-2014-8139, CVE-2014-8140 and CVE-2014-8141...

OESA-2025-1631 perl security update

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fixes: Perl threads have a working directory ra...