Skip to content
OpenAdvisories
High ELSA-2026-77576 1 CVE

Important: perl-DBI security update (Oracle Linux 8)

Published Oct 8, 2026 · Updated Oct 8, 2026

Ecosystem: Oracle Linux

Summary

[1.641-4]
- CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting
memory read during numeric type casting
Resolves: RHEL-271960

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 perl-DBI 0:1.641-4.el8_10

Vulnerabilities 1

  • Medium 6.2
    CVE-2026-88815

    DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv

    DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) …

    libdbi-perl libdbi-perl perl-DBI Debian Ubuntu Azure Linux