Skip to content
OpenAdvisories
High ELSA-2026-76762 1 CVE

Important: perl-DBI security update (Oracle Linux 10)

Published Oct 6, 2026 · Updated Oct 6, 2026

Ecosystem: Oracle Linux

Summary

[1.643-26.7]
- CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting
memory read during numeric type casting
Resolves: RHEL-271970

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 10 perl-DBI 0:1.643-26.el10_2.7

Vulnerabilities 1

  • Medium 6.2
    CVE-2026-88815

    DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv

    DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) …

    libdbi-perl libdbi-perl perl-DBI Debian Ubuntu Azure Linux