Summary
[4:5.40.2-512.2]
- Fixes: CVE-2025-40909 - Clone dirhandles without fchdir
Fixed packages 100
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | perl | 4:5.40.2-512.2.el10_0 |
| Oracle Linux · 10 | perl-Attribute-Handlers | 0:1.03-512.2.el10_0 |
| Oracle Linux · 10 | perl-AutoLoader | 0:5.74-512.2.el10_0 |
| Oracle Linux · 10 | perl-AutoSplit | 0:5.74-512.2.el10_0 |
| Oracle Linux · 10 | perl-autouse | 0:1.11-512.2.el10_0 |
| Oracle Linux · 10 | perl-B | 0:1.89-512.2.el10_0 |
| Oracle Linux · 10 | perl-base | 0:2.27-512.2.el10_0 |
| Oracle Linux · 10 | perl-Benchmark | 0:1.25-512.2.el10_0 |
| Oracle Linux · 10 | perl-blib | 0:1.07-512.2.el10_0 |
| Oracle Linux · 10 | perl-Class-Struct | 0:0.68-512.2.el10_0 |
| Oracle Linux · 10 | perl-Config-Extensions | 0:0.03-512.2.el10_0 |
| Oracle Linux · 10 | perl-DBM_Filter | 0:0.06-512.2.el10_0 |
| Oracle Linux · 10 | perl-debugger | 0:1.60-512.2.el10_0 |
| Oracle Linux · 10 | perl-deprecate | 0:0.04-512.2.el10_0 |
| Oracle Linux · 10 | perl-devel | 4:5.40.2-512.2.el10_0 |
| Oracle Linux · 10 | perl-Devel-Peek | 0:1.34-512.2.el10_0 |
| Oracle Linux · 10 | perl-Devel-SelfStubber | 0:1.06-512.2.el10_0 |
| Oracle Linux · 10 | perl-diagnostics | 0:1.40-512.2.el10_0 |
| Oracle Linux · 10 | perl-DirHandle | 0:1.05-512.2.el10_0 |
| Oracle Linux · 10 | perl-doc | 0:5.40.2-512.2.el10_0 |
| Oracle Linux · 10 | perl-Dumpvalue | 0:2.27-512.2.el10_0 |
| Oracle Linux · 10 | perl-DynaLoader | 0:1.56-512.2.el10_0 |
| Oracle Linux · 10 | perl-encoding-warnings | 0:0.14-512.2.el10_0 |
| Oracle Linux · 10 | perl-English | 0:1.11-512.2.el10_0 |
| Oracle Linux · 10 | perl-Errno | 0:1.38-512.2.el10_0 |
| Oracle Linux · 10 | perl-ExtUtils-Constant | 0:0.25-512.2.el10_0 |
| Oracle Linux · 10 | perl-ExtUtils-Embed | 0:1.35-512.2.el10_0 |
| Oracle Linux · 10 | perl-ExtUtils-Miniperl | 0:1.14-512.2.el10_0 |
| Oracle Linux · 10 | perl-Fcntl | 0:1.18-512.2.el10_0 |
| Oracle Linux · 10 | perl-fields | 0:2.27-512.2.el10_0 |
| Oracle Linux · 10 | perl-File-Basename | 0:2.86-512.2.el10_0 |
| Oracle Linux · 10 | perl-File-Compare | 0:1.100.800-512.2.el10_0 |
| Oracle Linux · 10 | perl-File-Copy | 0:2.41-512.2.el10_0 |
| Oracle Linux · 10 | perl-File-DosGlob | 0:1.12-512.2.el10_0 |
| Oracle Linux · 10 | perl-File-Find | 0:1.44-512.2.el10_0 |
| Oracle Linux · 10 | perl-File-stat | 0:1.14-512.2.el10_0 |
| Oracle Linux · 10 | perl-FileCache | 0:1.10-512.2.el10_0 |
| Oracle Linux · 10 | perl-FileHandle | 0:2.05-512.2.el10_0 |
| Oracle Linux · 10 | perl-filetest | 0:1.03-512.2.el10_0 |
| Oracle Linux · 10 | perl-FindBin | 0:1.54-512.2.el10_0 |
| Oracle Linux · 10 | perl-GDBM_File | 1:1.24-512.2.el10_0 |
| Oracle Linux · 10 | perl-Getopt-Std | 0:1.14-512.2.el10_0 |
| Oracle Linux · 10 | perl-Hash-Util | 0:0.32-512.2.el10_0 |
| Oracle Linux · 10 | perl-Hash-Util-FieldHash | 0:1.27-512.2.el10_0 |
| Oracle Linux · 10 | perl-I18N-Collate | 0:1.02-512.2.el10_0 |
| Oracle Linux · 10 | perl-I18N-Langinfo | 0:0.24-512.2.el10_0 |
| Oracle Linux · 10 | perl-I18N-LangTags | 0:0.45-512.2.el10_0 |
| Oracle Linux · 10 | perl-if | 0:0.61.000-512.2.el10_0 |
| Oracle Linux · 10 | perl-interpreter | 4:5.40.2-512.2.el10_0 |
| Oracle Linux · 10 | perl-IO | 0:1.55-512.2.el10_0 |
| Oracle Linux · 10 | perl-IPC-Open3 | 0:1.22-512.2.el10_0 |
| Oracle Linux · 10 | perl-less | 0:0.03-512.2.el10_0 |
| Oracle Linux · 10 | perl-lib | 0:0.65-512.2.el10_0 |
| Oracle Linux · 10 | perl-libnetcfg | 4:5.40.2-512.2.el10_0 |
| Oracle Linux · 10 | perl-libs | 4:5.40.2-512.2.el10_0 |
| Oracle Linux · 10 | perl-locale | 0:1.12-512.2.el10_0 |
| Oracle Linux · 10 | perl-Locale-Maketext-Simple | 1:0.21-512.2.el10_0 |
| Oracle Linux · 10 | perl-macros | 4:5.40.2-512.2.el10_0 |
| Oracle Linux · 10 | perl-Math-Complex | 0:1.62-512.2.el10_0 |
| Oracle Linux · 10 | perl-Memoize | 0:1.16-512.2.el10_0 |
| Oracle Linux · 10 | perl-meta-notation | 0:5.40.2-512.2.el10_0 |
| Oracle Linux · 10 | perl-Module-Loaded | 1:0.08-512.2.el10_0 |
| Oracle Linux · 10 | perl-mro | 0:1.29-512.2.el10_0 |
| Oracle Linux · 10 | perl-NDBM_File | 0:1.17-512.2.el10_0 |
| Oracle Linux · 10 | perl-Net | 0:1.04-512.2.el10_0 |
| Oracle Linux · 10 | perl-NEXT | 0:0.69-512.2.el10_0 |
| Oracle Linux · 10 | perl-ODBM_File | 0:1.18-512.2.el10_0 |
| Oracle Linux · 10 | perl-Opcode | 0:1.65-512.2.el10_0 |
| Oracle Linux · 10 | perl-open | 0:1.13-512.2.el10_0 |
| Oracle Linux · 10 | perl-overload | 0:1.37-512.2.el10_0 |
| Oracle Linux · 10 | perl-overloading | 0:0.02-512.2.el10_0 |
| Oracle Linux · 10 | perl-ph | 0:5.40.2-512.2.el10_0 |
| Oracle Linux · 10 | perl-Pod-Functions | 0:1.14-512.2.el10_0 |
| Oracle Linux · 10 | perl-Pod-Html | 0:1.35-512.2.el10_0 |
| Oracle Linux · 10 | perl-POSIX | 0:2.20-512.2.el10_0 |
| Oracle Linux · 10 | perl-Safe | 0:2.46-512.2.el10_0 |
| Oracle Linux · 10 | perl-Search-Dict | 0:1.07-512.2.el10_0 |
| Oracle Linux · 10 | perl-SelectSaver | 0:1.02-512.2.el10_0 |
| Oracle Linux · 10 | perl-SelfLoader | 0:1.27-512.2.el10_0 |
| Oracle Linux · 10 | perl-sigtrap | 0:1.10-512.2.el10_0 |
| Oracle Linux · 10 | perl-sort | 0:2.05-512.2.el10_0 |
| Oracle Linux · 10 | perl-subs | 0:1.04-512.2.el10_0 |
| Oracle Linux · 10 | perl-Symbol | 0:1.09-512.2.el10_0 |
| Oracle Linux · 10 | perl-Sys-Hostname | 0:1.25-512.2.el10_0 |
| Oracle Linux · 10 | perl-Term-Complete | 0:1.403-512.2.el10_0 |
| Oracle Linux · 10 | perl-Term-ReadLine | 0:1.17-512.2.el10_0 |
| Oracle Linux · 10 | perl-Test | 0:1.31-512.2.el10_0 |
| Oracle Linux · 10 | perl-Text-Abbrev | 0:1.02-512.2.el10_0 |
| Oracle Linux · 10 | perl-Thread | 0:3.05-512.2.el10_0 |
| Oracle Linux · 10 | perl-Thread-Semaphore | 0:2.13-512.2.el10_0 |
| Oracle Linux · 10 | perl-Tie | 0:4.6-512.2.el10_0 |
| Oracle Linux · 10 | perl-Tie-File | 0:1.09-512.2.el10_0 |
| Oracle Linux · 10 | perl-Tie-Memoize | 0:1.1-512.2.el10_0 |
| Oracle Linux · 10 | perl-Time | 0:1.04-512.2.el10_0 |
| Oracle Linux · 10 | perl-Time-Piece | 0:1.3401-512.2.el10_0 |
| Oracle Linux · 10 | perl-Unicode-UCD | 0:0.78-512.2.el10_0 |
| Oracle Linux · 10 | perl-User-pwent | 0:1.05-512.2.el10_0 |
| Oracle Linux · 10 | perl-utils | 0:5.40.2-512.2.el10_0 |
| Oracle Linux · 10 | perl-vars | 0:1.05-512.2.el10_0 |
| Oracle Linux · 10 | perl-vmsish | 0:1.04-512.2.el10_0 |
Vulnerabilities 1
-
Medium 5.9
Perl threads have a working directory race condition where file operations may target unintended paths
Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the n…