Summary
The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations.
Security Fix(es):
* DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | perl-DBI | 0:1.641-5.module+el8.10.0+40245+1df7f06b |
Vulnerabilities 1
-
High 7.5
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error t…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2486734