Skip to content
OpenAdvisories
High RLSA-2025:8696 1 CVE

Important: perl-FCGI:0.78 security update

Published Jul 29, 2025 · Updated Jul 29, 2025

Summary

The perl-FCGI package provides a Perl module for writing FastCGI applications. FastCGI is a more efficient alternative to traditional CGI, as it keeps application processes persistent across multiple requests. This module allows Perl web applications to handle requests faster and with lower resource overhead, making it suitable for high-traffic environments.

Security Fix(es):

* perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library (CVE-2025-40907)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 4

ReleasePackageFixed in
Rocky Linux · 8 perl-FCGI 1:0.78-12.module+el8.10.0+1990+6591fbc7
Rocky Linux · 8 perl-FCGI 1:0.78-12.module+el8.10.0+1990+7f517b07
Rocky Linux · 8 perl-FCGI 1:0.78-12.module+el8.10.0+1990+99c43398
Rocky Linux · 8 perl-FCGI 1:0.78-12.module+el8.10.0+1990+d30a9ea8

Vulnerabilities 1

  • Medium 5.3

    FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library

    FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library. The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nam…

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2366847