Summary
[1.643-26.6]
- Fix CVE-2026-73194: enforce placeholder range limit on :N style
placeholders
Resolves: RHEL-247316
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | perl-DBI | 0:1.643-26.el10_2.6 |
Vulnerabilities 1
-
Critical 9.1
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' br…