Security update for perl SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:02027-1 Final 1 1 2025-06-19T15:15:57Z current 2025-06-19T15:15:57Z 2025-06-19T15:15:57Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for perl This update for perl fixes the following issues: - CVE-2025-40909: Do not change the current directory when cloning an open directory handle (bsc#1244079). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/bci-minimal:15.6-2025-2027,Container bci/bci-minimal:latest-2025-2027,Container bci/openjdk-devel:17-2025-2027,Container bci/spack:0.23-2025-2027,Container bci/spack:latest-2025-2027,Container containers/open-webui-pipelines:0-2025-2027,Container suse/bind:latest-2025-2027,Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest-2025-2027,Container suse/ltss/sle15.4/bci-base:latest-2025-2027,Container suse/manager/4.3/proxy-httpd:latest-2025-2027,Container suse/manager/4.3/proxy-salt-broker:latest-2025-2027,Container suse/manager/4.3/proxy-squid:latest-2025-2027,Container suse/mariadb:10.11-2025-2027,Container suse/nginx:latest-2025-2027,Container suse/pcp:latest-2025-2027,Container suse/sle-micro-rancher/5.2:latest-2025-2027,Container suse/sle-micro-rancher/5.3:latest-2025-2027,Container suse/sle-micro-rancher/5.4:latest-2025-2027,Container suse/sle-micro/5.5/toolbox:latest-2025-2027,Container suse/sle-micro/5.5:latest-2025-2027,Container suse/sle-micro/base-5.5:latest-2025-2027,Container suse/sle-micro/rt-5.5:latest-2025-2027,Container suse/sle15:latest-2025-2027,Image SLES15-SP7-SAP-BYOS-EC2-2025-2027,Image SLES15-SP7-SAP-EC2-2025-2027,Image SLES15-SP7-SAP-Hardened-BYOS-EC2-2025-2027,SUSE-2025-2027,SUSE-SLE-Micro-5.3-2025-2027,SUSE-SLE-Micro-5.4-2025-2027,SUSE-SLE-Micro-5.5-2025-2027,SUSE-SLE-Module-Basesystem-15-SP6-2025-2027,SUSE-SLE-Module-Basesystem-15-SP7-2025-2027,SUSE-SLE-Module-Development-Tools-15-SP6-2025-2027,SUSE-SLE-Module-Development-Tools-15-SP7-2025-2027,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-2027,SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-2027,SUSE-SUSE-MicroOS-5.1-2025-2027,SUSE-SUSE-MicroOS-5.2-2025-2027,openSUSE-SLE-15.6-2025-2027 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-202502027-1/ Link for SUSE-SU-2025:02027-1 https://lists.suse.com/pipermail/sle-updates/2025-June/040380.html E-Mail link for SUSE-SU-2025:02027-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1244079 SUSE Bug 1244079 https://www.suse.com/security/cve/CVE-2025-40909/ SUSE CVE CVE-2025-40909 page Container bci/bci-minimal:15.6 Container bci/bci-minimal:latest Container bci/openjdk-devel:17 Container bci/spack:0.23 Container bci/spack:latest Container containers/open-webui-pipelines:0 Container suse/bind:latest Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest Container suse/ltss/sle15.4/bci-base:latest Container suse/manager/4.3/proxy-httpd:latest Container suse/manager/4.3/proxy-salt-broker:latest Container suse/manager/4.3/proxy-squid:latest Container suse/mariadb:10.11 Container suse/nginx:latest Container suse/pcp:latest Container suse/sle-micro-rancher/5.2:latest Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:latest Container suse/sle-micro/5.5/toolbox:latest Container suse/sle-micro/5.5:latest Container suse/sle-micro/base-5.5:latest Container suse/sle-micro/rt-5.5:latest Container suse/sle15:latest Image SLES15-SP7-SAP-BYOS-EC2 Image SLES15-SP7-SAP-EC2 Image SLES15-SP7-SAP-Hardened-BYOS-EC2 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 openSUSE Leap 15.6 perl-base-5.26.1-150300.17.20.1 perl-5.26.1-150300.17.20.1 perl-32bit-5.26.1-150300.17.20.1 perl-64bit-5.26.1-150300.17.20.1 perl-base-32bit-5.26.1-150300.17.20.1 perl-base-64bit-5.26.1-150300.17.20.1 perl-core-DB_File-5.26.1-150300.17.20.1 perl-core-DB_File-32bit-5.26.1-150300.17.20.1 perl-core-DB_File-64bit-5.26.1-150300.17.20.1 perl-doc-5.26.1-150300.17.20.1 perl-base-5.26.1-150300.17.20.1 as a component of Container bci/bci-minimal:15.6 perl-base-5.26.1-150300.17.20.1 as a component of Container bci/bci-minimal:latest perl-base-5.26.1-150300.17.20.1 as a component of Container bci/openjdk-devel:17 perl-5.26.1-150300.17.20.1 as a component of Container bci/spack:0.23 perl-5.26.1-150300.17.20.1 as a component of Container bci/spack:latest perl-base-5.26.1-150300.17.20.1 as a component of Container bci/spack:latest perl-5.26.1-150300.17.20.1 as a component of Container containers/open-webui-pipelines:0 perl-base-5.26.1-150300.17.20.1 as a component of Container containers/open-webui-pipelines:0 perl-base-5.26.1-150300.17.20.1 as a component of Container suse/bind:latest perl-base-5.26.1-150300.17.20.1 as a component of Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest perl-base-5.26.1-150300.17.20.1 as a component of Container suse/ltss/sle15.4/bci-base:latest perl-base-5.26.1-150300.17.20.1 as a component of Container suse/manager/4.3/proxy-httpd:latest perl-base-5.26.1-150300.17.20.1 as a component of Container suse/manager/4.3/proxy-salt-broker:latest perl-base-5.26.1-150300.17.20.1 as a component of Container suse/manager/4.3/proxy-squid:latest perl-5.26.1-150300.17.20.1 as a component of Container suse/mariadb:10.11 perl-base-5.26.1-150300.17.20.1 as a component of Container suse/mariadb:10.11 perl-5.26.1-150300.17.20.1 as a component of Container suse/nginx:latest perl-base-5.26.1-150300.17.20.1 as a component of Container suse/nginx:latest perl-5.26.1-150300.17.20.1 as a component of Container suse/pcp:latest perl-base-5.26.1-150300.17.20.1 as a component of Container suse/sle-micro-rancher/5.2:latest perl-base-5.26.1-150300.17.20.1 as a component of Container suse/sle-micro-rancher/5.3:latest perl-base-5.26.1-150300.17.20.1 as a component of Container suse/sle-micro-rancher/5.4:latest perl-5.26.1-150300.17.20.1 as a component of Container suse/sle-micro/5.5/toolbox:latest perl-base-5.26.1-150300.17.20.1 as a component of Container suse/sle-micro/5.5/toolbox:latest perl-5.26.1-150300.17.20.1 as a component of Container suse/sle-micro/5.5:latest perl-base-5.26.1-150300.17.20.1 as a component of Container suse/sle-micro/5.5:latest perl-base-5.26.1-150300.17.20.1 as a component of Container suse/sle-micro/base-5.5:latest perl-5.26.1-150300.17.20.1 as a component of Container suse/sle-micro/rt-5.5:latest perl-base-5.26.1-150300.17.20.1 as a component of Container suse/sle-micro/rt-5.5:latest perl-base-5.26.1-150300.17.20.1 as a component of Container suse/sle15:latest perl-5.26.1-150300.17.20.1 as a component of Image SLES15-SP7-SAP-BYOS-EC2 perl-base-5.26.1-150300.17.20.1 as a component of Image SLES15-SP7-SAP-BYOS-EC2 perl-5.26.1-150300.17.20.1 as a component of Image SLES15-SP7-SAP-EC2 perl-base-5.26.1-150300.17.20.1 as a component of Image SLES15-SP7-SAP-EC2 perl-5.26.1-150300.17.20.1 as a component of Image SLES15-SP7-SAP-Hardened-BYOS-EC2 perl-base-5.26.1-150300.17.20.1 as a component of Image SLES15-SP7-SAP-Hardened-BYOS-EC2 perl-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Micro 5.1 perl-base-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Micro 5.1 perl-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Micro 5.2 perl-base-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Micro 5.2 perl-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Micro 5.3 perl-base-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Micro 5.3 perl-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Micro 5.4 perl-base-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Micro 5.4 perl-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Micro 5.5 perl-base-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Micro 5.5 perl-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 perl-base-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 perl-base-32bit-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 perl-core-DB_File-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 perl-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 perl-base-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 perl-base-32bit-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 perl-core-DB_File-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 perl-doc-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 perl-doc-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 perl-32bit-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 perl-32bit-5.26.1-150300.17.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 perl-5.26.1-150300.17.20.1 as a component of openSUSE Leap 15.6 perl-32bit-5.26.1-150300.17.20.1 as a component of openSUSE Leap 15.6 perl-base-5.26.1-150300.17.20.1 as a component of openSUSE Leap 15.6 perl-base-32bit-5.26.1-150300.17.20.1 as a component of openSUSE Leap 15.6 perl-core-DB_File-5.26.1-150300.17.20.1 as a component of openSUSE Leap 15.6 perl-core-DB_File-32bit-5.26.1-150300.17.20.1 as a component of openSUSE Leap 15.6 perl-doc-5.26.1-150300.17.20.1 as a component of openSUSE Leap 15.6 Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any third (or more) thread already running. This may lead to unintended operations such as loading code or accessing files from unexpected locations, which a local attacker may be able to exploit. The bug was introduced in commit 11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6 CVE-2025-40909 Container bci/bci-minimal:15.6:perl-base-5.26.1-150300.17.20.1 Container bci/bci-minimal:latest:perl-base-5.26.1-150300.17.20.1 Container bci/openjdk-devel:17:perl-base-5.26.1-150300.17.20.1 Container bci/spack:0.23:perl-5.26.1-150300.17.20.1 Container bci/spack:latest:perl-5.26.1-150300.17.20.1 Container bci/spack:latest:perl-base-5.26.1-150300.17.20.1 Container containers/open-webui-pipelines:0:perl-5.26.1-150300.17.20.1 Container containers/open-webui-pipelines:0:perl-base-5.26.1-150300.17.20.1 Container suse/bind:latest:perl-base-5.26.1-150300.17.20.1 Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest:perl-base-5.26.1-150300.17.20.1 Container suse/ltss/sle15.4/bci-base:latest:perl-base-5.26.1-150300.17.20.1 Container suse/manager/4.3/proxy-httpd:latest:perl-base-5.26.1-150300.17.20.1 Container suse/manager/4.3/proxy-salt-broker:latest:perl-base-5.26.1-150300.17.20.1 Container suse/manager/4.3/proxy-squid:latest:perl-base-5.26.1-150300.17.20.1 Container suse/mariadb:10.11:perl-5.26.1-150300.17.20.1 Container suse/mariadb:10.11:perl-base-5.26.1-150300.17.20.1 Container suse/nginx:latest:perl-5.26.1-150300.17.20.1 Container suse/nginx:latest:perl-base-5.26.1-150300.17.20.1 Container suse/pcp:latest:perl-5.26.1-150300.17.20.1 Container suse/sle-micro-rancher/5.2:latest:perl-base-5.26.1-150300.17.20.1 Container suse/sle-micro-rancher/5.3:latest:perl-base-5.26.1-150300.17.20.1 Container suse/sle-micro-rancher/5.4:latest:perl-base-5.26.1-150300.17.20.1 Container suse/sle-micro/5.5/toolbox:latest:perl-5.26.1-150300.17.20.1 Container suse/sle-micro/5.5/toolbox:latest:perl-base-5.26.1-150300.17.20.1 Container suse/sle-micro/5.5:latest:perl-5.26.1-150300.17.20.1 Container suse/sle-micro/5.5:latest:perl-base-5.26.1-150300.17.20.1 Container suse/sle-micro/base-5.5:latest:perl-base-5.26.1-150300.17.20.1 Container suse/sle-micro/rt-5.5:latest:perl-5.26.1-150300.17.20.1 Container suse/sle-micro/rt-5.5:latest:perl-base-5.26.1-150300.17.20.1 Container suse/sle15:latest:perl-base-5.26.1-150300.17.20.1 Image SLES15-SP7-SAP-BYOS-EC2:perl-5.26.1-150300.17.20.1 Image SLES15-SP7-SAP-BYOS-EC2:perl-base-5.26.1-150300.17.20.1 Image SLES15-SP7-SAP-EC2:perl-5.26.1-150300.17.20.1 Image SLES15-SP7-SAP-EC2:perl-base-5.26.1-150300.17.20.1 Image SLES15-SP7-SAP-Hardened-BYOS-EC2:perl-5.26.1-150300.17.20.1 Image SLES15-SP7-SAP-Hardened-BYOS-EC2:perl-base-5.26.1-150300.17.20.1 SUSE Linux Enterprise Micro 5.1:perl-5.26.1-150300.17.20.1 SUSE Linux Enterprise Micro 5.1:perl-base-5.26.1-150300.17.20.1 SUSE Linux Enterprise Micro 5.2:perl-5.26.1-150300.17.20.1 SUSE Linux Enterprise Micro 5.2:perl-base-5.26.1-150300.17.20.1 SUSE Linux Enterprise Micro 5.3:perl-5.26.1-150300.17.20.1 SUSE Linux Enterprise Micro 5.3:perl-base-5.26.1-150300.17.20.1 SUSE Linux Enterprise Micro 5.4:perl-5.26.1-150300.17.20.1 SUSE Linux Enterprise Micro 5.4:perl-base-5.26.1-150300.17.20.1 SUSE Linux Enterprise Micro 5.5:perl-5.26.1-150300.17.20.1 SUSE Linux Enterprise Micro 5.5:perl-base-5.26.1-150300.17.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:perl-5.26.1-150300.17.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:perl-base-32bit-5.26.1-150300.17.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:perl-base-5.26.1-150300.17.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:perl-core-DB_File-5.26.1-150300.17.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:perl-5.26.1-150300.17.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:perl-base-32bit-5.26.1-150300.17.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:perl-base-5.26.1-150300.17.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:perl-core-DB_File-5.26.1-150300.17.20.1 SUSE Linux Enterprise Module for Development Tools 15 SP6:perl-doc-5.26.1-150300.17.20.1 SUSE Linux Enterprise Module for Development Tools 15 SP7:perl-doc-5.26.1-150300.17.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:perl-32bit-5.26.1-150300.17.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:perl-32bit-5.26.1-150300.17.20.1 openSUSE Leap 15.6:perl-32bit-5.26.1-150300.17.20.1 openSUSE Leap 15.6:perl-5.26.1-150300.17.20.1 openSUSE Leap 15.6:perl-base-32bit-5.26.1-150300.17.20.1 openSUSE Leap 15.6:perl-base-5.26.1-150300.17.20.1 openSUSE Leap 15.6:perl-core-DB_File-32bit-5.26.1-150300.17.20.1 openSUSE Leap 15.6:perl-core-DB_File-5.26.1-150300.17.20.1 openSUSE Leap 15.6:perl-doc-5.26.1-150300.17.20.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-202502027-1/ https://www.suse.com/security/cve/CVE-2025-40909.html CVE-2025-40909 https://bugzilla.suse.com/1244079 SUSE Bug 1244079