Summary
The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations.
Security Fix(es):
* perl-DBI: DBI for Perl: Heap out-of-bounds write via unvalidated numeric placeholder (CVE-2026-73194)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | perl-DBI | 0:1.641-10.module+el8.10.0+40328+bc090241 |
| Rocky Linux · 8 | perl-DBI | 0:1.641-10.module+el8.10.0+40328+f4c7f87b |
| Rocky Linux · 8 | perl-DBI | 0:1.641-10.module+el8.10.0+40328+3ea70367 |
| Rocky Linux · 8 | perl-DBI | 0:1.641-10.module+el8.10.0+40328+0878361a |
Vulnerabilities 1
-
Critical 9.1
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' br…