Summary
The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations.
Security Fix(es):
* perl-DBI: DBI: Loading of arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM (CVE-2026-78030)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | perl-DBI | 0:1.641-5.el8_10 |
| Rocky Linux · 8 | perl-DBI | 0:1.641-5.el8_10 |
| Rocky Linux · 8 | perl-DBI-debuginfo | 0:1.641-5.el8_10 |
| Rocky Linux · 8 | perl-DBI-debuginfo | 0:1.641-5.el8_10 |
| Rocky Linux · 8 | perl-DBI-debugsource | 0:1.641-5.el8_10 |
| Rocky Linux · 8 | perl-DBI-debugsource | 0:1.641-5.el8_10 |
Vulnerabilities 1
-
Critical 9.8
DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM
DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM. DBD::DBM passes the dbm_type and dbm_mldbm connect attributes to require without checking that the value names a module. require treats a …