Skip to content
OpenAdvisories
Medium RHSA-2025:11804 1 CVE

Red Hat Security Advisory: perl security update

Published Jul 28, 2025 · Updated Sep 2, 2026

Ecosystem: Red Hat

Fixed packages 120

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream perl 4:5.32.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Attribute-Handlers 0:1.01-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-AutoLoader 0:5.74-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-AutoSplit 0:5.74-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-autouse 0:1.11-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-B 0:1.80-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-B-debuginfo 0:1.80-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-base 0:2.27-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Benchmark 0:1.23-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-blib 0:1.07-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Class-Struct 0:0.66-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Config-Extensions 0:0.03-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-DBM_Filter 0:0.06-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-debugger 0:1.56-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-debuginfo 4:5.32.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-debugsource 4:5.32.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-deprecate 0:0.04-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-devel 4:5.32.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Devel-Peek 0:1.28-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Devel-Peek-debuginfo 0:1.28-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Devel-SelfStubber 0:1.06-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-diagnostics 0:1.37-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-DirHandle 0:1.05-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-doc 0:5.32.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Dumpvalue 0:2.27-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-DynaLoader 0:1.47-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-encoding-warnings 0:0.13-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-English 0:1.11-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Errno 0:1.30-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-ExtUtils-Constant 0:0.25-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-ExtUtils-Embed 0:1.35-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-ExtUtils-Miniperl 0:1.09-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Fcntl 0:1.13-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Fcntl-debuginfo 0:1.13-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-fields 0:2.27-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-File-Basename 0:2.85-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-File-Compare 0:1.100.600-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-File-Copy 0:2.34-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-File-DosGlob 0:1.12-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-File-DosGlob-debuginfo 0:1.12-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-File-Find 0:1.37-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-File-stat 0:1.09-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-FileCache 0:1.10-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-FileHandle 0:2.03-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-filetest 0:1.03-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-FindBin 0:1.51-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-GDBM_File 0:1.18-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-GDBM_File-debuginfo 0:1.18-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Getopt-Std 0:1.12-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Hash-Util 0:0.23-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Hash-Util-debuginfo 0:0.23-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Hash-Util-FieldHash 0:1.20-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Hash-Util-FieldHash-debuginfo 0:1.20-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-I18N-Collate 0:1.02-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-I18N-Langinfo 0:0.19-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-I18N-Langinfo-debuginfo 0:0.19-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-I18N-LangTags 0:0.44-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-if 0:0.60.800-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-interpreter 4:5.32.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-interpreter-debuginfo 4:5.32.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-IO 0:1.43-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-IO-debuginfo 0:1.43-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-IPC-Open3 0:1.21-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-less 0:0.03-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-lib 0:0.65-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-libnetcfg 4:5.32.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-libs 4:5.32.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-libs-debuginfo 4:5.32.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-locale 0:1.09-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Locale-Maketext-Simple 1:0.21-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-macros 4:5.32.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Math-Complex 0:1.59-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Memoize 0:1.03-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-meta-notation 0:5.32.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Module-Loaded 1:0.08-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-mro 0:1.23-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-mro-debuginfo 0:1.23-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-NDBM_File 0:1.15-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-NDBM_File-debuginfo 0:1.15-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Net 0:1.02-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-NEXT 0:0.67-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-ODBM_File 0:1.16-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-ODBM_File-debuginfo 0:1.16-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Opcode 0:1.48-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Opcode-debuginfo 0:1.48-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-open 0:1.12-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-overload 0:1.31-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-overloading 0:0.02-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-ph 0:5.32.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Pod-Functions 0:1.13-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Pod-Html 0:1.25-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-POSIX 0:1.94-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-POSIX-debuginfo 0:1.94-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Safe 0:2.41-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Search-Dict 0:1.07-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-SelectSaver 0:1.02-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-SelfLoader 0:1.26-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-sigtrap 0:1.09-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-sort 0:2.04-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-subs 0:1.03-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Symbol 0:1.08-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Sys-Hostname 0:1.23-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Sys-Hostname-debuginfo 0:1.23-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Term-Complete 0:1.403-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Term-ReadLine 0:1.17-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Test 0:1.31-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Text-Abbrev 0:1.02-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Thread 0:3.05-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Thread-Semaphore 0:2.13-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Tie 0:4.6-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Tie-File 0:1.06-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Tie-Memoize 0:1.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Time 0:1.03-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Time-Piece 0:1.3401-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Time-Piece-debuginfo 0:1.3401-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-Unicode-UCD 0:0.75-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-User-pwent 0:1.03-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-utils 0:5.32.1-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-vars 0:1.05-481.1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream perl-vmsish 0:1.04-481.1.el9_6

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-40909

    Perl threads have a working directory race condition where file operations may target unintended paths

    Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the n…

    perl perl perl perl Debian Ubuntu Azure Linux Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2369407
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11804.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-40909
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-40909
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-40909
  • article
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098226
  • article
    https://github.com/Perl/perl5/commit/11a11ecf4bea72b17d250cfb43c897be1341861e
  • article
    https://github.com/Perl/perl5/commit/918bfff86ca8d6d4e4ec5b30994451e0bd74aba9.patch
  • article
    https://github.com/Perl/perl5/issues/10387
  • article
    https://github.com/Perl/perl5/issues/23010
  • article
    https://perldoc.perl.org/5.14.0/perl5136delta#Directory-handles-not-copied-to-threads
  • article
    https://www.openwall.com/lists/oss-security/2025/05/22/2