Summary
The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations.
Security Fix(es):
* perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting (CVE-2026-88815)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | perl-DBI | 0:1.641-11.module+el8.10.0+40389+be9de675 |
| Rocky Linux · 8 | perl-DBI | 0:1.641-11.module+el8.10.0+40389+69d937a8 |
| Rocky Linux · 8 | perl-DBI | 0:1.641-11.module+el8.10.0+40389+22ad89a7 |
| Rocky Linux · 8 | perl-DBI | 0:1.641-11.module+el8.10.0+40389+75d7e2a7 |
Vulnerabilities 1
-
Medium 6.2
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) …