Summary
[1.641-3]
- Force placeholder limit on :N and :pN placeholders (CVE-2026-73194)
Resolves: RHEL-247320
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | perl-DBI | 0:1.641-3.el8_10 |
Vulnerabilities 1
-
Critical 9.1
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' br…