Skip to content
OpenAdvisories
High RLSA-2026:38512 1 CVE

Important: perl-DBI security update

Published Jul 14, 2026 · Updated Jul 14, 2026

Ecosystem: Rocky Linux

Summary

DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used.

Security Fix(es):

* DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 9 perl-DBI 0:1.643-9.el9_8.1

Vulnerabilities 1

  • High 7.5
    CVE-2026-9698

    DBI versions before 1.648 for Perl saved errors in a limited-sized buffer

    DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error t…

    HMBRAND DBI libdbi-perl libdbi-perl Debian Ubuntu Azure Linux Alpine

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2486734