GCVE-110-MAGEIA-2025-274 — Vulnetix

GCVE-110-MAGEIA-2025-274

Advisory Published

Vulnetix · Advisory published November 12, 2025

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. (CVE-2023-31484) Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes. (CVE-2024-56406) Perl threads have a working directory race condition where file operations may target unintended paths. (CVE-2025-40909)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	perl	5.36.0-1.2.mga9 (unaffected), 0 (affected)	—

Aliases

References

Updated perl packages fix security vulnerabilities

advisory

Updated perl packages fix security vulnerabilities

advisory

Updated perl packages fix security vulnerabilities

advisory

Updated perl packages fix security vulnerabilities

advisory

Updated perl packages fix security vulnerabilities

issue

Updated perl packages fix security vulnerabilities

issue

Updated perl packages fix security vulnerabilities

issue

Updated perl packages fix security vulnerabilities

issue

Updated perl packages fix security vulnerabilities

issue

Updated perl packages fix security vulnerabilities

issue

Updated perl packages fix security vulnerabilities

issue

Updated perl packages fix security vulnerabilities

issue

Updated perl packages fix security vulnerabilities

issue

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON

$ Console Community · 100/wk Open console ›