Skip to content
OpenAdvisories
High ELSA-2026-71608 1 CVE

Important: perl-DBI security update (Oracle Linux 8)

Published Sep 25, 2026 · Updated Sep 25, 2026

Summary

[1.641-3]
- Force placeholder limit on :N and :pN placeholders (CVE-2026-73194)
Resolves: RHEL-247320

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 perl-DBI 0:1.641-3.el8_10

Vulnerabilities 1

  • Critical 9.1

    DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse

    DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' br…