Most recent entries from all

ALSA-2025:9329 — Important: perl-YAML-LibYAML security update

Affected: AlmaLinux:8: perl-YAML-LibYAML

Kirill Siminov's "libyaml" is arguably the best YAML implementation. The C library is written precisely to the YAML 1.1 specification. It was originally bound to Python and was later bound to Ruby.

Security Fix(es):

* yaml-libyaml: LibYAML Perl File Modification Vulnerability (CVE-2025-40908)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-08363

EUVD-2026-242291

fkie_cve-2025-40908

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified

GHSA-jh9m-3m95-c6hp

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified

OESA-2025-1591 — perl-YAML-LibYAML security update

Affected: openEuler:22.03-LTS-SP4: perl-YAML-LibYAML, openEuler:24.03-LTS: perl-YAML-LibYAML, openEuler:24.03-LTS-SP1: perl-YAML-LibYAML, openEuler:20.03-LTS-SP4: perl-YAML-LibYAML, openEuler:22.03-LTS-SP3: perl-YAML-LibYAML

Security Fix(es):

A vulnerability was found in TINITA YAML-LibYAML up to 0.902.x on Perl. It has been classified as problematic.CWE is classifying the issue as CWE-552. The product makes files or directories accessible to unauthorized actors, even though they should not be.This is going to have an impact on confidentiality.Upgrading to version 0.903.0 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-40908)

openSUSE-SU-2025:15261-1 — perl-YAML-LibYAML-0.904.0-2.1 on GA media

perl-YAML-LibYAML-0.904.0-2.1 on GA media

RHSA-2025:9338 — Red Hat Security Advisory: perl-YAML-LibYAML security update

yaml-libyaml: LibYAML Perl File Modification Vulnerability

SUSE-SU-2025:01885-1 — Security update for perl-YAML-LibYAML

Security update for perl-YAML-LibYAML

UBUNTU-CVE-2025-40908

Affected: Ubuntu:16.04:LTS: libyaml-libyaml-perl, Ubuntu:18.04:LTS: libyaml-libyaml-perl, Ubuntu:20.04:LTS: libyaml-libyaml-perl, Ubuntu:22.04:LTS: libyaml-libyaml-perl, Ubuntu:24.04:LTS: libyaml-libyaml-perl

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified

WID-SEC-W-2025-1370 — Red Hat Enterprise Linux (yaml-libyam): Schwachstelle ermöglicht Manipulation von Dateien

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren.