TI-2025-27301 CVE-2025-40907 · GHSA-488m-4fx8-f36v
Heap-based buffer overflow in ether FCGI
Priority MEDIUM 57
FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.
RHSA-2025:8890
perl-FCGI:0.78 security update
Released 2025-06-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) perl-FCGI-1:0.78-11.module+el8.6.0+23193+53aa8c2a.1.src::perl-FCGI:0.78, perl-FCGI-1:0.78-11.module+el8.6.0+23193+53aa8c2a.1.x86_64::perl-FCGI:0.78, perl-FCGI-1:0.78-11.module+el8.6.0+23193+6b2b1cae.1.src::perl-FCGI:0.78 +5
- Red Hat Enterprise Linux AppStream E4S (v.8.6) perl-FCGI-1:0.78-11.module+el8.6.0+23193+53aa8c2a.1.aarch64::perl-FCGI:0.78, perl-FCGI-1:0.78-11.module+el8.6.0+23193+53aa8c2a.1.ppc64le::perl-FCGI:0.78, perl-FCGI-1:0.78-11.module+el8.6.0+23193+53aa8c2a.1.s390x::perl-FCGI:0.78 +17
- Red Hat Enterprise Linux AppStream TUS (v.8.6) perl-FCGI-1:0.78-11.module+el8.6.0+23193+53aa8c2a.1.src::perl-FCGI:0.78, perl-FCGI-1:0.78-11.module+el8.6.0+23193+53aa8c2a.1.x86_64::perl-FCGI:0.78, perl-FCGI-1:0.78-11.module+el8.6.0+23193+6b2b1cae.1.src::perl-FCGI:0.78 +5