Ubuntu 25.04: USN-7620-1 critical security flaw in libfile-find-rule-perl

ubuntu

July 7, 2025

File::Find::Rule could be made to run programs if it opened a specially crafted file name.

Summary

File::Find::Rule could be made to run programs if it opened a specially

crafted file name.

Software Description:

- libfile-find-rule-perl: module to search for files based on rules

Details:

Kevin Ryde discovered that File::Find::Rule incorrectly handled certain

file names. An attacker could possibly use this issue to execute arbitrary

code.

Topics Covered

security advisory package update arbitrary code execution Ubuntu important file find rule

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
  libfile-find-rule-perl          0.34-3ubuntu0.25.04.1

Ubuntu 24.10
  libfile-find-rule-perl          0.34-3ubuntu0.24.10.1

Ubuntu 24.04 LTS
  libfile-find-rule-perl          0.34-3ubuntu0.24.04.1

Ubuntu 22.04 LTS
  libfile-find-rule-perl          0.34-1ubuntu0.22.04.1

In general, a standard system update will make all the necessary changes.