Skip to content
OpenAdvisories
High ELSA-2026-71422 1 CVE

Important: perl-DBI security update (Oracle Linux 9)

Published Sep 24, 2026 · Updated Sep 24, 2026

Ecosystem: Oracle Linux

Summary

[1.643-9.6]
- Force placeholder limit on :# and :p# too (CVE-2026-73194)
Related: RHEL-247327

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 perl-DBI 0:1.643-9.el9_8.6

Vulnerabilities 1

  • Critical 9.1
    CVE-2026-73194

    DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse

    DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' br…

    libdbi-perl libdbi-perl perl-DBI Debian Ubuntu Azure Linux