TI-2025-27303 CVE-2025-40909 · GHSA-jpf5-526x-c5hw
Untrusted search path in perl
Priority MEDIUM 60
Perl threads have a working directory race condition where file operations may target unintended paths.
RHSA-2026:50262
perl:5.32 security update
Released 2026-08-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.8.8) perl-4:5.32.1-472.module+el8.8.0+24404+b3ad2701.1.ppc64le::perl:5.32, perl-4:5.32.1-472.module+el8.8.0+24404+b3ad2701.1.src::perl:5.32, perl-4:5.32.1-472.module+el8.8.0+24404+b3ad2701.1.x86_64::perl:5.32 +6
- Red Hat Enterprise Linux AppStream TUS (v.8.8) perl-4:5.32.1-472.module+el8.8.0+24404+b3ad2701.1.src::perl:5.32, perl-4:5.32.1-472.module+el8.8.0+24404+b3ad2701.1.x86_64::perl:5.32, perl-IO-Compress-2.096-1.module+el8.8.0+24435+247ee4c9.1.noarch::perl:5.32 +3
Fixes 2 records
TI-2026-36219 CVE-2026-48962 · GHSA-q6wx-vhvq-x7h6
IO::Compress versions before 2.220 for Perl can execute arbitrary code in…
Priority LOW 38
IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.