Skip to content
OpenAdvisories
High ELSA-2026-52772 2 CVEs

Important: perl-DBI:1.641 security update (Oracle Linux 8)

Published Aug 12, 2026 · Updated Aug 12, 2026

Ecosystem: Oracle Linux

Summary

perl-DBI
[1.641-8]
- Fix unsafe string eval in DBI::Profile (CVE-2026-14380)
Resolves: RHEL-211151

[1.641-7]
- Fix patch.

[1.641-6]
- Fix heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739)
Resolves: RHEL-193298

[1.641-5]
- Fix stack overflow and buffer overflow in DBI.xs (CVE-2026-9698)
Resolves: RHEL-184974

[1.641-4]
- BR: perl(blib), perl(FileHandle) for tests

[1.641-3]
- Rebuild with enable hardening (bug #1636329)

[1.641-2]
- Rebuilding for multicontext errata test purposes (rhbz#1666480)

[1.641-1]
- 1.641 bump

[1.640-3]
- Add build-require gcc

[1.640-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

perl-DBI
[1.641-8]
- Fix unsafe string eval in DBI::Profile (CVE-2026-14380)
Resolves: RHEL-211151

[1.641-7]
- Fix patch.

[1.641-6]
- Fix heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739)
Resolves: RHEL-193298

[1.641-5]
- Fix stack overflow and buffer overflow in DBI.xs (CVE-2026-9698)
Resolves: RHEL-184974

[1.641-4]
- BR: perl(blib), perl(FileHandle) for tests

[1.641-3]
- Rebuild with enable hardening (bug #1636329)

[1.641-2]
- Rebuilding for multicontext errata test purposes (rhbz#1666480)

[1.641-1]
- 1.641 bump

[1.640-3]
- Add build-require gcc

[1.640-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 perl-DBI 0:1.641-8.module+el8.10.0+90987+dfc813d3

Vulnerabilities 2

  • Critical 9.8
    CVE-2026-14739

    DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders

    DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not allocate enough memory to handle approximately 1.2-million placeholders. DBI version 1.650 sets a…

    HMBRAND DBI libdbi-perl libdbi-perl Debian Ubuntu Azure Linux Alpine
  • High 8.8
    CVE-2026-14380

    DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile

    DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eva…

    libdbi-perl libdbi-perl perl-DBI perl-dbi Debian Ubuntu Azure Linux Alpine