Summary
Perl is a high-level programming language that is commonly used for system administration utilities and web programming.
Security Fix(es):
* perl: Perl threads have a working directory race condition where file operations may target unintended paths (CVE-2025-40909)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 26
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | perl | 4:5.26.3-423.el8_10 |
| AlmaLinux · 8 | perl-Attribute-Handlers | 0.99-423.el8_10 |
| AlmaLinux · 8 | perl-devel | 4:5.26.3-423.el8_10 |
| AlmaLinux · 8 | perl-Devel-Peek | 1.26-423.el8_10 |
| AlmaLinux · 8 | perl-Devel-SelfStubber | 1.06-423.el8_10 |
| AlmaLinux · 8 | perl-Errno | 1.28-423.el8_10 |
| AlmaLinux · 8 | perl-ExtUtils-Embed | 1.34-423.el8_10 |
| AlmaLinux · 8 | perl-ExtUtils-Miniperl | 1.06-423.el8_10 |
| AlmaLinux · 8 | perl-interpreter | 4:5.26.3-423.el8_10 |
| AlmaLinux · 8 | perl-IO | 1.38-423.el8_10 |
| AlmaLinux · 8 | perl-IO-Zlib | 1:1.10-423.el8_10 |
| AlmaLinux · 8 | perl-libnetcfg | 4:5.26.3-423.el8_10 |
| AlmaLinux · 8 | perl-libs | 4:5.26.3-423.el8_10 |
| AlmaLinux · 8 | perl-Locale-Maketext-Simple | 1:0.21-423.el8_10 |
| AlmaLinux · 8 | perl-macros | 4:5.26.3-423.el8_10 |
| AlmaLinux · 8 | perl-Math-Complex | 1.59-423.el8_10 |
| AlmaLinux · 8 | perl-Memoize | 1.03-423.el8_10 |
| AlmaLinux · 8 | perl-Module-Loaded | 1:0.08-423.el8_10 |
| AlmaLinux · 8 | perl-Net-Ping | 2.55-423.el8_10 |
| AlmaLinux · 8 | perl-open | 1.11-423.el8_10 |
| AlmaLinux · 8 | perl-Pod-Html | 1.22.02-423.el8_10 |
| AlmaLinux · 8 | perl-SelfLoader | 1.23-423.el8_10 |
| AlmaLinux · 8 | perl-Test | 1.30-423.el8_10 |
| AlmaLinux · 8 | perl-tests | 4:5.26.3-423.el8_10 |
| AlmaLinux · 8 | perl-Time-Piece | 1.31-423.el8_10 |
| AlmaLinux · 8 | perl-utils | 5.26.3-423.el8_10 |
Vulnerabilities 1
-
Medium 5.9
Perl threads have a working directory race condition where file operations may target unintended paths
Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the n…