yaml-libyaml: LibYAML Perl File Modification Vulnerability

A flaw was found in yaml-libyaml. The component uses a two-argument open function when parsing YAML files, which allows an attacker to modify existing files on the system. This flaw allows a local attacker to provide a crafted YAML file as input. This issue can result in unauthorized modification...

yaml-libyaml: LibYAML Perl File Modification Vulnerability

A flaw was found in yaml-libyaml. The component uses a two-argument open function when parsing YAML files, which allows an attacker to modify existing files on the system. This flaw allows a local attacker to provide a crafted YAML file as input. This issue can result in unauthorized modification...

yaml-libyaml: LibYAML Perl File Modification Vulnerability

A flaw was found in yaml-libyaml. The component uses a two-argument open function when parsing YAML files, which allows an attacker to modify existing files on the system. This flaw allows a local attacker to provide a crafted YAML file as input. This issue can result in unauthorized modification...

Medium: perl-YAML-LibYAML

Issue Overview: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified CVE-2025-40908 Affected Packages: perl-YAML-LibYAML Issue Correction: Run dnf update perl-YAML-LibYAML --releasever 2023.7.20250623 or dnf update --advisory ALAS2023-2025-1036...

Security update for perl-YAML-LibYAML

This update for perl-YAML-LibYAML fixes the following issues: CVE-2025-40908: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified bsc1243902 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE CVE-2011-10007

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...

AZL-62273 CVE-2011-10007 affecting package perl-File-Find-Rule 0.34-15

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker controlled filename to provide the MODE parameter to open, turning the filename into a command to...

SUSE CVE-2025-40908

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...

AZL-62279 CVE-2025-40908 affecting package perl-YAML-LibYAML 0.81-3

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...

DEBIAN-CVE-2025-40908

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...

AZL-62242 CVE-2025-40908 affecting package perl-YAML-LibYAML for versions less than 0.902.0-2

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...

UBUNTU-CVE-2025-40908

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...

UBUNTU-CVE-2020-10674

PerlSpeak through 2.01 allows attackers to execute arbitrary OS commands, as demonstrated by use of system and 2-argument open...

PT-2015-7894

Name of the Vulnerable Software and Affected Versions perl-Module-Signature affected versions not specified Description The issue concerns faulty parsing of PGP signature boundaries in Module::Signature, which could lead to interpreting the unsigned portion of a SIGNATURE file as the signed...