Skip to content
OpenAdvisories
High · 8.8 CVE-2026-19546 EUVD-2026-56197GHSA-rv8x-7xr2-hmqm

Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute

Published Aug 11, 2026 · Updated Nov 4, 2026 · Assigned by redhat

Description

A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z.

For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Enterprise Linux 10 — —
Red Hat Red Hat Enterprise Linux 9 — —
Red Hat Red Hat Enterprise Linux 6 — —
Red Hat Red Hat Enterprise Linux 7 — —
Red Hat Red Hat Enterprise Linux 8 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
RHEL 10 perl-DBI 1.643-26.el10_2.4 RHSA-2026:65887
RHEL 9 perl-DBI 1.643-9.el9_8.5 RHSA-2026:66179

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 perl-DBI 1.643-26.el10_2.4 ALSA-2026:65887
AlmaLinux 9 perl-DBI 1.643-9.el9_8.5 ALSA-2026:66179

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 perl-DBI 1.643-26.el10_2.4 RLSA-2026:65887
Rocky Linux 9 perl-DBI 1.643-9.el9_8.5 RLSA-2026:66179

Advisories 6

References