Summary
It was discovered that the Perl DBI module incorrectly handled certain
error messages. An attacker could use this issue to cause applications
using the Perl DBI module to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2026-9698)
It was discovered that the Perl DBI module incorrectly handled memory when
preparsing SQL statements that included more than nine binders. An attacker
could use this issue to cause applications using the Perl DBI module to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2026-10879)
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | libdbi-perl | 1.643-3ubuntu0.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | libdbi-perl | 1.643-4ubuntu0.1 |
| Ubuntu · 25.10 | libdbi-perl | 1.647-1ubuntu0.25.10.1 |
| Ubuntu · 26.04 LTS 26.04:LTS | libdbi-perl | 1.647-1ubuntu0.26.04.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libdbi-perl | 1.630-1ubuntu0.1~esm6 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libdbi-perl | 1.634-1ubuntu0.2+esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libdbi-perl | 1.640-1ubuntu0.3+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | libdbi-perl | 1.643-1ubuntu0.1+esm1 |