Issued at: 2025-10-04
Updated at: 2025-10-10
Synopsis
Important: perl-YAML-LibYAML security update
Description
Kirill Siminov's "libyaml" is arguably the best YAML implementation. The C library is written precisely to the YAML 1.1 specification. It was originally bound to Python and was later bound to Ruby.
Security Fix(es):
* yaml-libyaml: LibYAML Perl File Modification Vulnerability (CVE-2025-40908)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 9.6 aarch64
Rocky Linux 9.6 ppc64le
Rocky Linux 9.6 s390x
Rocky Linux 9.6 x86_64
Fixes
2369630
CVEs
CVE-2025-40908
Affected packages
Rocky Linux 9.6 aarch64 - CRB
perl-YAML-LibYAML-1:0.82-6.1.el9_6.aarch64.rpm
perl-YAML-LibYAML-1:0.82-6.1.el9_6.src.rpm
perl-YAML-LibYAML-debuginfo-1:0.82-6.1.el9_6.aarch64.rpm
perl-YAML-LibYAML-debugsource-1:0.82-6.1.el9_6.aarch64.rpm
Rocky Linux 9.6 ppc64le - CRB
perl-YAML-LibYAML-1:0.82-6.1.el9_6.ppc64le.rpm
perl-YAML-LibYAML-1:0.82-6.1.el9_6.src.rpm
perl-YAML-LibYAML-debuginfo-1:0.82-6.1.el9_6.ppc64le.rpm
perl-YAML-LibYAML-debugsource-1:0.82-6.1.el9_6.ppc64le.rpm
Rocky Linux 9.6 s390x - CRB
perl-YAML-LibYAML-1:0.82-6.1.el9_6.s390x.rpm
perl-YAML-LibYAML-1:0.82-6.1.el9_6.src.rpm
perl-YAML-LibYAML-debuginfo-1:0.82-6.1.el9_6.s390x.rpm
perl-YAML-LibYAML-debugsource-1:0.82-6.1.el9_6.s390x.rpm
Rocky Linux 9.6 x86_64 - CRB
perl-YAML-LibYAML-1:0.82-6.1.el9_6.src.rpm
perl-YAML-LibYAML-1:0.82-6.1.el9_6.x86_64.rpm
perl-YAML-LibYAML-debuginfo-1:0.82-6.1.el9_6.x86_64.rpm
perl-YAML-LibYAML-debugsource-1:0.82-6.1.el9_6.x86_64.rpm