Red Hat Product Errata RHSA-2026:37070 - Security Advisory Issued: 2026-07-09 Updated: 2026-07-09 RHSA-2026:37070 - Security Advisory Overview Updated Packages Synopsis Moderate: perl:5.32 security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the perl:5.32 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fix(es): perl: Perl threads have a working directory race condition where file operations may target unintended paths (CVE-2025-40909) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 x86_64 Red Hat Enterprise Linux Server - AUS 8.6 x86_64 Fixes BZ - 2369407 - CVE-2025-40909 perl: Perl threads have a working directory race condition where file operations may target unintended paths CVEs CVE-2025-40909 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 SRPM perl-5.32.1-471.module+el8.6.0+24484+7827d5b5.1.src.rpm SHA-256: 3195db02502afb0309a7b770a33cac89bf6390eebcb5cc0ff8b927db849cf88a perl-Algorithm-Diff-1.1903-10.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 873ceb1dda497136a407985993a832d5ee636b097cf6a9a5c314b7aced8a3648 perl-Archive-Tar-2.38-3.module+el8.6.0+13324+628a2397.src.rpm SHA-256: b4e7e2c836a3035b3db8cf6453e681538fef4a2669409fd006273b9c1ea096ce perl-Archive-Zip-1.68-3.module+el8.6.0+13324+628a2397.src.rpm SHA-256: e3d03b0ad93aef4c11607b99d21a3de12dda6859c2f75f7f2d624f35b9c7bbe4 perl-CPAN-2.28-5.module+el8.6.0+13324+628a2397.src.rpm SHA-256: aa57c320190279b71ed7c67e064acf7813483d1ac69cfe71535436f66fbcd4f3 perl-CPAN-DistnameInfo-0.12-13.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 18a9a3941bda5b980ff5db957b84decf266977b1058c256597aa30410abbeffa perl-CPAN-Meta-2.150010-397.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 2339c7f86c49f87400c9666150acccfe5cf07ff0c73b94064bed57818f7adc20 perl-CPAN-Meta-Requirements-2.140-397.module+el8.6.0+13324+628a2397.src.rpm SHA-256: f796abe6e8485fd1f8a0986710065aa6ce3d167b7e472552bfd1f43b86ba7ad8 perl-CPAN-Meta-YAML-0.018-1001.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 09293269cd774732da3022be2a95900c92eb518b2725de86e604e4554662dade perl-Carp-1.50-439.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 667f6ee21b10162c2f85d5fd15849c982faab7f81663d1573ff63119fc6f124f perl-Compress-Bzip2-2.28-2.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 650fe36fb7e3db765fee24617f536b6b0d3dae0e667385d387b6f65b9ddece86 perl-Compress-Raw-Bzip2-2.096-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 47395ef37bf26c4d783d3378e313f73329d0e4e48453a57068ffccdc00c746dc perl-Compress-Raw-Lzma-2.096-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: ded922782d33a4583d7edc49c7090aef78b4bef807f5503c4d5187cf4029d45b perl-Compress-Raw-Zlib-2.096-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: e8b9aeea282b57e3b5b8bc59541a6ae0faffd09f0d9141c938b41d3a4a11419b perl-Config-Perl-V-0.32-441.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 2288f0e8ca9d5243cd00f47d8ca3b287672f0047249854eedcffb839a3884144 perl-DB_File-1.855-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 3464653fc03c8791465b3bf51b055cb055f400dff0cdf990771d81ab9fb4e768 perl-Data-Dumper-2.174-440.module+el8.6.0+13324+628a2397.src.rpm SHA-256: eb1df2b2c33eae820dedc6da1c8a60eb6d0182bde426cb1af73ed6497bbd8f06 perl-Data-OptList-0.110-7.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 8c0743712ea696ebfbe3a2be8d153d7781cff797265fbabd116cd56eff2d9d58 perl-Data-Section-0.200007-8.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 87b2df484c1c23b9ee162eb42439611a6fcb8fa9270df9d00aefc486f7d842c8 perl-Devel-PPPort-3.62-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 1af89235a3ecfc83e54eebe40d5a12e05b77a9bed4e61329159f3e214d40fbde perl-Devel-Size-0.83-3.module+el8.6.0+13324+628a2397.src.rpm SHA-256: e86e9c393b19392552f0fae6ec954b1be0050a17e89e19b3b474724abb76e378 perl-Digest-1.20-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 417c88656b974ed2f216a3d7af3c170c0023d042c9ca58fa3ca621a1a2c32e40 perl-Digest-MD5-2.58-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 5e989ca1eb2acb32dff4d50cf7c057538865b1f5db7e09a29ca1204c461d3d48 perl-Digest-SHA-6.02-2.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 84352e13584a01e65be4129b7496c058a5c78454bf3bf20c971f7df566181426 perl-Encode-3.08-461.module+el8.6.0+13324+628a2397.src.rpm SHA-256: ef3d94a44fde42d672186bd032bdec2a43c23b773c7f1ecb4eaefc0d5affc07a perl-Encode-Locale-1.05-10.module+el8.6.0+13324+628a2397.src.rpm SHA-256: fcb2953211268f5e0199df9c943d5661b14e0a8c8e9a5d1846d4f53b2171ee2f perl-Env-1.04-396.module+el8.6.0+13324+628a2397.src.rpm SHA-256: b7f04756df8784c626a4eca16f54c7ca104e7579f6d7fca8b893a32257e7f3e4 perl-Exporter-5.74-458.module+el8.6.0+13324+628a2397.src.rpm SHA-256: fa08b9b945d3a5bce0c18b2286e488c673df1fa9ef2e28ab25d6eb0d36050df1 perl-ExtUtils-CBuilder-0.280236-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 413f9fe111a8dcea03066ba07e925109334fbbc8cfc765d9892247d6a5fcb270 perl-ExtUtils-Install-2.20-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 6d5a29bb9f4dbd840b5df1a99b952071a20c71ca7c500c4131c5d9c56a38b791 perl-ExtUtils-MakeMaker-7.46-3.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 573bc68a248c4e4c9a264de016de34bc3e45680da8ff73ffd590606c0f5924de perl-ExtUtils-Manifest-1.73-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: f00686a68f0e2613daa73a2906c482d4b606955272c7b2580137546c61bb7d37 perl-ExtUtils-ParseXS-3.40-439.module+el8.6.0+13324+628a2397.src.rpm SHA-256: e10a86d6ce85c1ebd7150e23ed476fb56ac0d7f70eaa433aa8b5bae580ae8fc5 perl-Fedora-VSP-0.001-10.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 18b7c7ec0b9fbe49012d4e2eb0e0365398919ec9f3c0402e685eb4933fc99e4c perl-File-Fetch-1.00-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: edecda7732bc9bae9f1712f80705753dce007fa5e8d9fcd8fb2aab7313efe13b perl-File-HomeDir-1.004-6.module+el8.6.0+13324+628a2397.src.rpm SHA-256: f5387a8835aa672297ea6bba5a13538fadf9dfa9a41e649d52922ee04fdbb53d perl-File-Path-2.16-439.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 092023c6f41ff2afd25e5a41485d9efc7d72ced260a65d65482d4322afedbb5d perl-File-Temp-0.231.100-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 532cd30b4b493e854a66fb83551d3133781d0d9188099327d6bb510735380f2d perl-File-Which-1.23-4.module+el8.6.0+13324+628a2397.src.rpm SHA-256: d6d2695a69d432a54eebd5867adb6c095130b3c04d2326810e2a09d59fb7bdf5 perl-Filter-1.60-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 2684e40e09c5b4d13c02889448b874d41386e75f2d1d6c9bbb9c5ad5ab40f0ff perl-Filter-Simple-0.96-457.module+el8.6.0+13324+628a2397.src.rpm SHA-256: b52b30ebb726988aa5d2e011375f8a804abad1790428bb6a59e855c99e795b95 perl-Getopt-Long-2.52-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 2d1648722afb03ef0adb4177451a884d4449a9f28f3b3a7cc1f1de54dab56e8a perl-HTTP-Tiny-0.078-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 819f461b5a081f936f02d492f8b067203632fc6ce1a59a3cb863dbd13b7ce8d1 perl-IO-Compress-2.096-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 47e0c4dd4c4212852573170ad6f21275d419e1763ff7dde140c384fdcdd2ba78 perl-IO-Compress-Lzma-2.096-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: c16bd2526c0799b27f126772351caf09813429a0b4f04633642408d8e80c3619 perl-IO-Socket-IP-0.41-2.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 591f736befec14d14b5b67ea192b309dcf3250444c2e987261e16251a3a03cd9 perl-IPC-Cmd-1.04-2.module+el8.6.0+13324+628a2397.src.rpm SHA-256: ef0e3c9b9b39793754b1c5744ee41c88ca3282e5a3bd5e16ae828eaeff597489 perl-IPC-SysV-2.09-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: a730d3bd61483a6dad87e305ba495927f4a3902bf7950f8ef8d37387d672820e perl-IPC-System-Simple-1.30-3.module+el8.6.0+13324+628a2397.src.rpm SHA-256: b07a49cb894a3e39c15e662bd331a61ed00642158e5e0abc0e2fcecae887c009 perl-Importer-0.025-6.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 76981417d585c3b54fdeb18022ca7899d85e6fce0a6c41182ad24f6008da2d26 perl-JSON-PP-4.04-2.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 8711e3ecd97a6f60f9fc358802ecfc2c9774dd4c9d344c28609fdcb8c43bfb02 perl-Locale-Maketext-1.29-440.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 4fb92232e9d087189914511b3fa7787416b3e12de6a0ceddb59c0f8706ef1469 perl-MIME-Base64-3.15-1001.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 0af326cf54e7f75b2768fdf7472ea851a5e60bb470ccc42d40e2e00bf3530f8b perl-MRO-Compat-0.13-5.module+el8.6.0+13324+628a2397.src.rpm SHA-256: eaaf5247c59cd40cf7b49904593cc982e511cd6d5f2f6b15b7ad90e4a11c73ed perl-Math-BigInt-1.9998.18-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: b2c9d28f2f0d6302fceb558123534ddac03a4252ae6e8a73748e033b5828f703 perl-Math-BigInt-FastCalc-0.500.900-1.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 306cc76a3dddd679d358fef8fec7892c0c4f315f8a0dd11f1a08b3c3de903940 perl-Math-BigRat-0.2614-2.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 803c3d6d59995986ee94e57c45af99771100c190d2c6f3ffbe7f3cd6324f7635 perl-Module-Build-0.42.31-5.module+el8.6.0+13324+628a2397.src.rpm SHA-256: 7d2667b73f7a31f11f335ee79e5239592452