Critical SUSE-RU-2025:03081-1 1 CVE

Recommended update for perl-YAML-LibYAML

Published Sep 5, 2025 · Updated Feb 4, 2026

Ecosystem: openSUSE Ecosystem: SUSE

Summary

This update for perl-YAML-LibYAML fixes the following issues:

- Updated to 0.904.0
- Dependency submission for the openQA stack

Fixed packages 3

Release	Package	Fixed in
openSUSE · Leap 15.6	perl-YAML-LibYAML	0.904.0-150000.3.16.1
SUSE · SLES 15 SP6 Linux Enterprise Module for Development Tools 15 SP6	perl-YAML-LibYAML	0.904.0-150000.3.16.1
SUSE · SLES 15 SP7 Linux Enterprise Module for Development Tools 15 SP7	perl-YAML-LibYAML	0.904.0-150000.3.16.1

Vulnerabilities 1

Critical 9.1

CVE-2025-40908

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified

TINITA YAML::LibYAML libyaml-libyaml-perl libyaml-libyaml-perl Debian Ubuntu Azure Linux

Jun 1, 2025

References

web
https://www.suse.com/security/cve/CVE-2025-40908