Summary
perl-DBI
[1.641-10]
- Fix number of tests
Resolves: RHEL-247869
[1.641-9]
- Fix placeholder limit on :N and :pN style placeholders (CVE-2026-73194)
Resolves: RHEL-247869
[1.641-8]
- Fix unsafe string eval in DBI::Profile (CVE-2026-14380)
Resolves: RHEL-211151
[1.641-7]
- Fix patch.
[1.641-6]
- Fix heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739)
Resolves: RHEL-193298
[1.641-5]
- Fix stack overflow and buffer overflow in DBI.xs (CVE-2026-9698)
Resolves: RHEL-184974
[1.641-4]
- BR: perl(blib), perl(FileHandle) for tests
[1.641-3]
- Rebuild with enable hardening (bug #1636329)
[1.641-2]
- Rebuilding for multicontext errata test purposes (rhbz#1666480)
[1.641-1]
- 1.641 bump
perl-DBI
[1.641-10]
- Fix number of tests
Resolves: RHEL-247869
[1.641-9]
- Fix placeholder limit on :N and :pN style placeholders (CVE-2026-73194)
Resolves: RHEL-247869
[1.641-8]
- Fix unsafe string eval in DBI::Profile (CVE-2026-14380)
Resolves: RHEL-211151
[1.641-7]
- Fix patch.
[1.641-6]
- Fix heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739)
Resolves: RHEL-193298
[1.641-5]
- Fix stack overflow and buffer overflow in DBI.xs (CVE-2026-9698)
Resolves: RHEL-184974
[1.641-4]
- BR: perl(blib), perl(FileHandle) for tests
[1.641-3]
- Rebuild with enable hardening (bug #1636329)
[1.641-2]
- Rebuilding for multicontext errata test purposes (rhbz#1666480)
[1.641-1]
- 1.641 bump
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | perl-DBI | 0:1.641-10.module+el8.10.0+91039+7b6b05e5 |
Vulnerabilities 1
-
Critical 9.1
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' br…