Skip to content
OpenAdvisories
High ELSA-2026-70753 1 CVE

Important: perl-DBI security update (Oracle Linux 10)

Published Sep 23, 2026 · Updated Sep 23, 2026

Summary

[1.643-26.6]
- Fix CVE-2026-73194: enforce placeholder range limit on :N style
placeholders
Resolves: RHEL-247316

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 10 perl-DBI 0:1.643-26.el10_2.6

Vulnerabilities 1

  • Critical 9.1

    DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse

    DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' br…