Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 508
Alerts This Week
Warning Icon 1 508

Fedora 42: perl-CGI-Simple Important HTTP Response Splitting CVE-2025-40927

fedora
Calendar Grey December 11, 2025
Scroller Fedora
Update for Fedora 42 perl-CGI-Simple addressing important HTTP issues and CVE-2025-40927. Recommended installation.
1.282 - Sanitize all user-supplied values before inserting into HTTP headers; Fixed CVE-2025-40927.

Summary

Simple totally OO CGI interface that is CGI.pm compliant.

Update Information:

1.282 - Sanitize all user-supplied values before inserting into HTTP headers; Fixed CVE-2025-40927.

Topics%20covered

Topics Covered

security advisory fedora important http response splitting perl-cgi-simple cve-2025-40927

Change Log

* Tue Dec 2 2025 Jitka Plesnikova - 1:1.282-1 - 1.282 bump (rhbz#2392359)

References


[ 1 ] Bug #2391834 - CVE-2025-40927 perl-CGI-Simple: CGI::Simple versions 1.281 and earlier for Perl has a HTTP response splitting flaw [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2391834 [ 2 ] Bug #2392359 - Upgrade perl-CGI-Simple to 1.282 https://bugzilla.redhat.com/show_bug.cgi?id=2392359

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-47551b2aa2' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: perl-CGI-Simple
Product: Fedora 42
Version: 1.282
Release: 1.fc42
URL: https://metacpan.org/release/CGI-Simple
Summary: Simple totally OO CGI interface that is CGI.pm compliant

Topics%20covered

Topics Covered

security advisory fedora important http response splitting perl-cgi-simple cve-2025-40927

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.