Red Hat Security Advisory: perl-File-Find-Rule security update

Fixed packages 1

Vulnerabilities 1

• High 8.8
  CVE-2011-10007

  File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted file name

  File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter t…

  RCLAMP File::Find::Rule libfile-find-rule-perl perl-File-Find-Rule Debian Ubuntu Azure Linux Alpine
  Jun 5, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2370424
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9741.json
• report
  https://access.redhat.com/security/cve/CVE-2011-10007
• advisory
  https://www.cve.org/CVERecord?id=CVE-2011-10007
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2011-10007
• article
  https://github.com/richardc/perl-file-find-rule/commit/df58128bcee4c1da78c34d7f3fe1357e575ad56f.patch
• article
  https://github.com/richardc/perl-file-find-rule/pull/4
• article
  https://lists.debian.org/debian-lts-announce/2025/06/msg00006.html
• article
  https://metacpan.org/release/RCLAMP/File-Find-Rule-0.34/source/lib/File/Find/Rule.pm#L423
• article
  https://rt.cpan.org/Public/Bug/Display.html?id=64504