Skip to content
OpenAdvisories
High RLSA-2026:99210 1 CVE

Important: perl-DBI:1.641 security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Rocky Linux

Summary

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations.

Security Fix(es):

* perl-DBI: DBI: Loading of arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM (CVE-2026-78030)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 24

ReleasePackageFixed in
Rocky Linux · 8 perl-DBI 0:1.641-12.module+el8.10.0+40428+64a2217e
Rocky Linux · 8 perl-DBI 0:1.641-12.module+el8.10.0+40428+f1d2b26f
Rocky Linux · 8 perl-DBI 0:1.641-12.module+el8.10.0+40428+45c449b5
Rocky Linux · 8 perl-DBI 0:1.641-12.module+el8.10.0+40428+57e58fd1
Rocky Linux · 8 perl-DBI 0:1.641-12.module+el8.10.0+40428+f1d2b26f
Rocky Linux · 8 perl-DBI 0:1.641-12.module+el8.10.0+40428+64a2217e
Rocky Linux · 8 perl-DBI 0:1.641-12.module+el8.10.0+40428+57e58fd1
Rocky Linux · 8 perl-DBI 0:1.641-12.module+el8.10.0+40428+45c449b5
Rocky Linux · 8 perl-DBI-debuginfo 0:1.641-12.module+el8.10.0+40428+45c449b5
Rocky Linux · 8 perl-DBI-debuginfo 0:1.641-12.module+el8.10.0+40428+57e58fd1
Rocky Linux · 8 perl-DBI-debuginfo 0:1.641-12.module+el8.10.0+40428+64a2217e
Rocky Linux · 8 perl-DBI-debuginfo 0:1.641-12.module+el8.10.0+40428+f1d2b26f
Rocky Linux · 8 perl-DBI-debuginfo 0:1.641-12.module+el8.10.0+40428+45c449b5
Rocky Linux · 8 perl-DBI-debuginfo 0:1.641-12.module+el8.10.0+40428+57e58fd1
Rocky Linux · 8 perl-DBI-debuginfo 0:1.641-12.module+el8.10.0+40428+64a2217e
Rocky Linux · 8 perl-DBI-debuginfo 0:1.641-12.module+el8.10.0+40428+f1d2b26f
Rocky Linux · 8 perl-DBI-debugsource 0:1.641-12.module+el8.10.0+40428+45c449b5
Rocky Linux · 8 perl-DBI-debugsource 0:1.641-12.module+el8.10.0+40428+57e58fd1
Rocky Linux · 8 perl-DBI-debugsource 0:1.641-12.module+el8.10.0+40428+64a2217e
Rocky Linux · 8 perl-DBI-debugsource 0:1.641-12.module+el8.10.0+40428+f1d2b26f
Rocky Linux · 8 perl-DBI-debugsource 0:1.641-12.module+el8.10.0+40428+45c449b5
Rocky Linux · 8 perl-DBI-debugsource 0:1.641-12.module+el8.10.0+40428+57e58fd1
Rocky Linux · 8 perl-DBI-debugsource 0:1.641-12.module+el8.10.0+40428+64a2217e
Rocky Linux · 8 perl-DBI-debugsource 0:1.641-12.module+el8.10.0+40428+f1d2b26f

Vulnerabilities 1

  • Critical 9.8
    CVE-2026-78030

    DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM

    DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM. DBD::DBM passes the dbm_type and dbm_mldbm connect attributes to require without checking that the value names a module. require treats a …

    libdbi-perl libdbi-perl perl-DBI Debian Ubuntu Azure Linux

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2538843
  • advisory
    https://access.redhat.com/errata/RHSA-2026:99210