High ELSA-2025-9329 1 CVE

Important: perl-YAML-LibYAML security update (Oracle Linux 8)

Published Jun 24, 2025 · Updated Jun 24, 2025

Ecosystem: Oracle Linux

Summary

[1:0.70-2]
- Use 3-arg form of open in LoadFile (CVE-2025-40908)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	perl-YAML-LibYAML	1:0.70-2.el8_10

Vulnerabilities 1

Critical 9.1

CVE-2025-40908

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified

TINITA YAML::LibYAML libyaml-libyaml-perl libyaml-libyaml-perl Debian Ubuntu Azure Linux

Jun 1, 2025