Red Hat Security Advisory: perl-FCGI:0.78 security update
The perl-FCGI package for Perl, used to write FastCGI applications, contains a vulnerability in versions 0.44 through 0.82 due to a flaw in the embedded FastCGI fcgi2 library (CVE-2025-40907). This vulnerability affects Red Hat Enterprise Linux 8.6 variants and has been rated with an important security impact by Red Hat. A security update is available to address this issue. FastCGI improves web application performance by keeping processes persistent across requests, so this vulnerability could affect high-traffic Perl web applications using these versions.
AI Analysis
Technical Summary
The perl-FCGI package versions 0.44 through 0.82 include a vulnerable version of the FastCGI fcgi2 library, identified as CVE-2025-40907. This vulnerability affects Perl FastCGI applications by introducing a security flaw in the underlying fcgi2 library. Red Hat has issued a security advisory (RHSA-2025:8890) for Red Hat Enterprise Linux 8.6 variants, providing an updated perl-FCGI package (version 0.78-11) that addresses this issue. The advisory rates the impact as important and directs users to apply the update to remediate the vulnerability.
Potential Impact
The vulnerability affects Perl FastCGI applications using perl-FCGI versions 0.44 through 0.82, potentially exposing them to security risks due to the flawed FastCGI fcgi2 library. The impact is rated as important by Red Hat, indicating a significant security concern that could affect the confidentiality, integrity, or availability of affected systems. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released an updated perl-FCGI package (version 0.78-11) for Red Hat Enterprise Linux 8.6 variants that fixes the vulnerability. Users should apply this official security update as detailed in the Red Hat advisory (RHSA-2025:8890) and the referenced update article (https://access.redhat.com/articles/11258). No additional mitigation steps are indicated beyond applying the provided patch.
Red Hat Security Advisory: perl-FCGI:0.78 security update
Description
The perl-FCGI package for Perl, used to write FastCGI applications, contains a vulnerability in versions 0.44 through 0.82 due to a flaw in the embedded FastCGI fcgi2 library (CVE-2025-40907). This vulnerability affects Red Hat Enterprise Linux 8.6 variants and has been rated with an important security impact by Red Hat. A security update is available to address this issue. FastCGI improves web application performance by keeping processes persistent across requests, so this vulnerability could affect high-traffic Perl web applications using these versions.
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The perl-FCGI package versions 0.44 through 0.82 include a vulnerable version of the FastCGI fcgi2 library, identified as CVE-2025-40907. This vulnerability affects Perl FastCGI applications by introducing a security flaw in the underlying fcgi2 library. Red Hat has issued a security advisory (RHSA-2025:8890) for Red Hat Enterprise Linux 8.6 variants, providing an updated perl-FCGI package (version 0.78-11) that addresses this issue. The advisory rates the impact as important and directs users to apply the update to remediate the vulnerability.
Potential Impact
The vulnerability affects Perl FastCGI applications using perl-FCGI versions 0.44 through 0.82, potentially exposing them to security risks due to the flawed FastCGI fcgi2 library. The impact is rated as important by Red Hat, indicating a significant security concern that could affect the confidentiality, integrity, or availability of affected systems. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released an updated perl-FCGI package (version 0.78-11) for Red Hat Enterprise Linux 8.6 variants that fixes the vulnerability. Users should apply this official security update as detailed in the Red Hat advisory (RHSA-2025:8890) and the referenced update article (https://access.redhat.com/articles/11258). No additional mitigation steps are indicated beyond applying the provided patch.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:8890
- Cve Count
- 1
Threat ID: 6a4049e227e9c79719832b5a
Added to database: 06/27/2026, 22:08:34 UTC
Last enriched: 07/18/2026, 12:56:07 UTC
Last updated: 09/10/2026, 19:36:50 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.