Summary
This update for perl fixes the following issues:
- CVE-2025-40909: Do not change the current directory when cloning an open directory handle (bsc#1244079).
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| openSUSE · Leap 15.6 | perl | 5.26.1-150300.17.20.1 |
| SUSE · SLE Micro 5.1 Linux Enterprise Micro 5.1 | perl | 5.26.1-150300.17.20.1 |
| SUSE · SLE Micro 5.2 Linux Enterprise Micro 5.2 | perl | 5.26.1-150300.17.20.1 |
| SUSE · SLE Micro 5.3 Linux Enterprise Micro 5.3 | perl | 5.26.1-150300.17.20.1 |
| SUSE · SLE Micro 5.4 Linux Enterprise Micro 5.4 | perl | 5.26.1-150300.17.20.1 |
| SUSE · SLE Micro 5.5 Linux Enterprise Micro 5.5 | perl | 5.26.1-150300.17.20.1 |
| SUSE · SLES 15 SP6 Linux Enterprise Module for Basesystem 15 SP6 | perl | 5.26.1-150300.17.20.1 |
| SUSE · SLES 15 SP7 Linux Enterprise Module for Basesystem 15 SP7 | perl | 5.26.1-150300.17.20.1 |
| SUSE · SLES 15 SP6 Linux Enterprise Module for Development Tools 15 SP6 | perl | 5.26.1-150300.17.20.1 |
| SUSE · SLES 15 SP7 Linux Enterprise Module for Development Tools 15 SP7 | perl | 5.26.1-150300.17.20.1 |
| SUSE · SLES 15 SP6 Linux Enterprise Module for Package Hub 15 SP6 | perl | 5.26.1-150300.17.20.1 |
| SUSE · SLES 15 SP7 Linux Enterprise Module for Package Hub 15 SP7 | perl | 5.26.1-150300.17.20.1 |
Vulnerabilities 1
-
Medium 5.9
Perl threads have a working directory race condition where file operations may target unintended paths
Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the n…