High ELSA-2025-9330 1 CVE

Important: perl-YAML-LibYAML security update (Oracle Linux 9)

Published Jun 23, 2025 · Updated Jun 23, 2025

Ecosystem: Oracle Linux

Summary

[1:0.82-6.1]
- Use 3-arg form of open in LoadFile (CVE-2025-40908)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	perl-YAML-LibYAML	1:0.82-6.1.el9_6

Vulnerabilities 1

Critical 9.1

CVE-2025-40908

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified

TINITA YAML::LibYAML libyaml-libyaml-perl libyaml-libyaml-perl Debian Ubuntu Azure Linux

Jun 1, 2025