ROOT-OS-DEBIAN-11-CVE-2025-40908

Source
https://root.io/security/ROOT-OS-DEBIAN-11-CVE-2025-40908
Import Source
https://api.root.io/external/osv/ROOT-OS-DEBIAN-11-CVE-2025-40908.json
JSON Data
https://api.test.osv.dev/v1/vulns/ROOT-OS-DEBIAN-11-CVE-2025-40908
Upstream
Published
2026-08-20T09:40:03Z
Modified
2026-08-20T10:31:05Z
Summary
CVE-2025-40908 in libyaml-libyaml-perl - Patched by Root
Details

Root has patched CVE-2025-40908 in the libyaml-libyaml-perl package for Root:Debian:11. Multiple fixed versions available.

Database specific
{
    "distro": "debian",
    "distro_version": "11",
    "severity": "HIGH",
    "source": "Root"
}

Affected packages

Root:Debian:11 / libyaml-libyaml-perl

Package

Name
libyaml-libyaml-perl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.82+repack-1.root.io.1
Fixed
0.82+repack-1.root.io.2
Fixed
0.82+repack-1.root.io.3
Fixed
0.82+repack-1.root.io.5
Fixed
0.82+repack-1.root.io.4
Fixed
0.82+repack-1.aikido.6
Fixed
0.82+repack-1.aikido.7
Fixed
0.82+repack-1.aikido.8

Database specific

all_fixed_versions
[
    "0.82+repack-1.root.io.1",
    "0.82+repack-1.root.io.2",
    "0.82+repack-1.root.io.3",
    "0.82+repack-1.root.io.5",
    "0.82+repack-1.root.io.4",
    "0.82+repack-1.aikido.6",
    "0.82+repack-1.aikido.7",
    "0.82+repack-1.aikido.8"
]
root_patch_version
"aikido.8"
root_patched
true
source
"https://api.root.io/external/osv/ROOT-OS-DEBIAN-11-CVE-2025-40908.json"
total_fixed_versions
8
upstream_version
"0.82+repack-1"

Root:Debian:11 / rootio-libyaml-libyaml-perl

Package

Name
rootio-libyaml-libyaml-perl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.82+repack-1.root.io.1
Fixed
0.82+repack-1.root.io.2
Fixed
0.82+repack-1.root.io.3
Fixed
0.82+repack-1.root.io.5
Fixed
0.82+repack-1.root.io.4
Fixed
0.82+repack-1.aikido.6
Fixed
0.82+repack-1.aikido.7
Fixed
0.82+repack-1.aikido.8

Database specific

all_fixed_versions
[
    "0.82+repack-1.root.io.1",
    "0.82+repack-1.root.io.2",
    "0.82+repack-1.root.io.3",
    "0.82+repack-1.root.io.5",
    "0.82+repack-1.root.io.4",
    "0.82+repack-1.aikido.6",
    "0.82+repack-1.aikido.7",
    "0.82+repack-1.aikido.8"
]
root_patch_version
"aikido.8"
root_patched
true
source
"https://api.root.io/external/osv/ROOT-OS-DEBIAN-11-CVE-2025-40908.json"
total_fixed_versions
8
upstream_version
"0.82+repack-1"