Red Hat Security Advisory

RHSA-2025:9329

perl-YAML-LibYAML security update

Released 2025-06-23 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2025-27302 CVE-2025-40908 · GHSA-jh9m-3m95-c6hp

MEDIUM 48

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00472 Published 2025-06-01 Fixed in 0.903.0 CWE-552