Skip to content
OpenAdvisories
High ALAS2023-2025-1035 1 CVE

Important: perl-CryptX security update (Amazon Linux 2023)

Published Jun 18, 2025 · Updated Jun 23, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40914: Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2023 perl-CryptX 0:0.080-1.amzn2023.0.1
Amazon Linux · 2023 perl-CryptX-debuginfo 0:0.080-1.amzn2023.0.1
Amazon Linux · 2023 perl-CryptX-debugsource 0:0.080-1.amzn2023.0.1
Amazon Linux · 2023 perl-CryptX-tests 0:0.080-1.amzn2023.0.1

Vulnerabilities 1

  • Critical 9.8
    CVE-2025-40914

    Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow

    Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow. CryptX embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.

    MIK CryptX samba libcryptx-perl Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-40914.html