Skip to content
OpenAdvisories
High ELSA-2026-76760 1 CVE

Important: perl-DBI security update (Oracle Linux 9)

Published Oct 7, 2026 · Updated Oct 7, 2026

Ecosystem: Oracle Linux

Summary

[1.643-9.7]
- CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting
memory read during numeric type casting
Resolves: RHEL-271974

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 perl-DBI 0:1.643-9.el9_8.7

Vulnerabilities 1

  • Medium 6.2
    CVE-2026-88815

    DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv

    DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) …

    libdbi-perl libdbi-perl perl-DBI Debian Ubuntu Azure Linux