TI-2025-27301 CVE-2025-40907 · GHSA-488m-4fx8-f36v
Heap-based buffer overflow in ether FCGI
Priority MEDIUM 57
FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.
RHSA-2025:8698
perl-FCGI:0.78 security update
Released 2025-06-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.8.8) perl-FCGI-1:0.78-11.module+el8.8.0+23188+11a20ed6.1.ppc64le::perl-FCGI:0.78, perl-FCGI-1:0.78-11.module+el8.8.0+23188+11a20ed6.1.src::perl-FCGI:0.78, perl-FCGI-1:0.78-11.module+el8.8.0+23188+11a20ed6.1.x86_64::perl-FCGI:0.78 +9
- Red Hat Enterprise Linux AppStream TUS (v.8.8) perl-FCGI-1:0.78-11.module+el8.8.0+23188+11a20ed6.1.src::perl-FCGI:0.78, perl-FCGI-1:0.78-11.module+el8.8.0+23188+11a20ed6.1.x86_64::perl-FCGI:0.78, perl-FCGI-1:0.78-11.module+el8.8.0+23188+465ac1a4.1.src::perl-FCGI:0.78 +5