Most recent entries from all

ALSA-2025:8635 — Important: perl-FCGI security update

Affected: AlmaLinux:9: perl-FCGI

FastCGI Perl bindings.

Security Fix(es):

* perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library (CVE-2025-40907)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-09005

ESSA-2025:3015 — Important: perl-FCGI:0.78 security update

Important: perl-FCGI:0.78 security update

EUVD-2026-252052

fkie_cve-2025-40907

FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.

The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.

GHSA-488m-4fx8-f36v

FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.

OESA-2025-1544 — perl-FCGI security update

Affected: openEuler:24.03-LTS: perl-FCGI, openEuler:24.03-LTS-SP1: perl-FCGI, openEuler:20.03-LTS-SP4: perl-FCGI, openEuler:22.03-LTS-SP3: perl-FCGI, openEuler:22.03-LTS-SP4: perl-FCGI

FastCGI Perl bingdings. Security Fix(es):

FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.

RHSA-2025:8636 — Red Hat Security Advisory: perl-FCGI security update

perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library

UBUNTU-CVE-2025-40907

Affected: Ubuntu:Pro:16.04:LTS: libfcgi-perl, Ubuntu:Pro:18.04:LTS: libfcgi-perl, Ubuntu:20.04:LTS: libfcgi-perl

FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library. The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.

WID-SEC-W-2025-1273 — Perl: Mehrere Schwachstellen ermöglichen Denial of Service

Ein lokaler Angreifer kann mehrere Schwachstellen in Perl ausnutzen, um einen Denial of Service herbeizuführen und um potenziell beliebigen Programmcode auszuführen.