Skip to content
OpenAdvisories
Medium RHSA-2025:12056 1 CVE

Red Hat Security Advisory: perl security update

Published Jul 30, 2025 · Updated Sep 2, 2026

Ecosystem: Red Hat

Fixed packages 120

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.0 perl 4:5.40.2-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Attribute-Handlers 0:1.03-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-AutoLoader 0:5.74-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-AutoSplit 0:5.74-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-autouse 0:1.11-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-B 0:1.89-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-B-debuginfo 0:1.89-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-base 0:2.27-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Benchmark 0:1.25-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-blib 0:1.07-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Class-Struct 0:0.68-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Config-Extensions 0:0.03-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-DBM_Filter 0:0.06-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-debugger 0:1.60-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-debuginfo 4:5.40.2-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-debugsource 4:5.40.2-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-deprecate 0:0.04-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-devel 4:5.40.2-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Devel-Peek 0:1.34-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Devel-Peek-debuginfo 0:1.34-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Devel-SelfStubber 0:1.06-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-diagnostics 0:1.40-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-DirHandle 0:1.05-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-doc 0:5.40.2-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Dumpvalue 0:2.27-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-DynaLoader 0:1.56-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-encoding-warnings 0:0.14-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-English 0:1.11-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Errno 0:1.38-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-ExtUtils-Constant 0:0.25-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-ExtUtils-Embed 0:1.35-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-ExtUtils-Miniperl 0:1.14-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Fcntl 0:1.18-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Fcntl-debuginfo 0:1.18-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-fields 0:2.27-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-File-Basename 0:2.86-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-File-Compare 0:1.100.800-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-File-Copy 0:2.41-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-File-DosGlob 0:1.12-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-File-DosGlob-debuginfo 0:1.12-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-File-Find 0:1.44-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-File-stat 0:1.14-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-FileCache 0:1.10-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-FileHandle 0:2.05-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-filetest 0:1.03-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-FindBin 0:1.54-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-GDBM_File 1:1.24-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-GDBM_File-debuginfo 1:1.24-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Getopt-Std 0:1.14-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Hash-Util 0:0.32-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Hash-Util-debuginfo 0:0.32-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Hash-Util-FieldHash 0:1.27-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Hash-Util-FieldHash-debuginfo 0:1.27-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-I18N-Collate 0:1.02-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-I18N-Langinfo 0:0.24-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-I18N-Langinfo-debuginfo 0:0.24-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-I18N-LangTags 0:0.45-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-if 0:0.61.000-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-interpreter 4:5.40.2-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-interpreter-debuginfo 4:5.40.2-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-IO 0:1.55-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-IO-debuginfo 0:1.55-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-IPC-Open3 0:1.22-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-less 0:0.03-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-lib 0:0.65-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-libnetcfg 4:5.40.2-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-libs 4:5.40.2-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-libs-debuginfo 4:5.40.2-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-locale 0:1.12-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Locale-Maketext-Simple 1:0.21-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-macros 4:5.40.2-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Math-Complex 0:1.62-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Memoize 0:1.16-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-meta-notation 0:5.40.2-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Module-Loaded 1:0.08-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-mro 0:1.29-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-mro-debuginfo 0:1.29-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-NDBM_File 0:1.17-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-NDBM_File-debuginfo 0:1.17-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Net 0:1.04-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-NEXT 0:0.69-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-ODBM_File 0:1.18-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-ODBM_File-debuginfo 0:1.18-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Opcode 0:1.65-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Opcode-debuginfo 0:1.65-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-open 0:1.13-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-overload 0:1.37-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-overloading 0:0.02-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-ph 0:5.40.2-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Pod-Functions 0:1.14-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Pod-Html 0:1.35-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-POSIX 0:2.20-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-POSIX-debuginfo 0:2.20-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Safe 0:2.46-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Search-Dict 0:1.07-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-SelectSaver 0:1.02-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-SelfLoader 0:1.27-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-sigtrap 0:1.10-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-sort 0:2.05-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-subs 0:1.04-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Symbol 0:1.09-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Sys-Hostname 0:1.25-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Sys-Hostname-debuginfo 0:1.25-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Term-Complete 0:1.403-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Term-ReadLine 0:1.17-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Test 0:1.31-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Text-Abbrev 0:1.02-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Thread 0:3.05-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Thread-Semaphore 0:2.13-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Tie 0:4.6-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Tie-File 0:1.09-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Tie-Memoize 0:1.1-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Time 0:1.04-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Time-Piece 0:1.3401-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Time-Piece-debuginfo 0:1.3401-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-Unicode-UCD 0:0.78-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-User-pwent 0:1.05-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-utils 0:5.40.2-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-vars 0:1.05-512.2.el10_0
Red Hat · RHEL 10 enterprise_linux:10.0 perl-vmsish 0:1.04-512.2.el10_0

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-40909

    Perl threads have a working directory race condition where file operations may target unintended paths

    Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the n…

    perl perl perl perl Debian Ubuntu Azure Linux Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2369407
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_12056.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-40909
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-40909
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-40909
  • article
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098226
  • article
    https://github.com/Perl/perl5/commit/11a11ecf4bea72b17d250cfb43c897be1341861e
  • article
    https://github.com/Perl/perl5/commit/918bfff86ca8d6d4e4ec5b30994451e0bd74aba9.patch
  • article
    https://github.com/Perl/perl5/issues/10387
  • article
    https://github.com/Perl/perl5/issues/23010
  • article
    https://perldoc.perl.org/5.14.0/perl5136delta#Directory-handles-not-copied-to-threads
  • article
    https://www.openwall.com/lists/oss-security/2025/05/22/2