ALSA-2026:52772
ALSA-2026:52772 · Important: perl-DBI:1.641 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fix(es): * DBI: Heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739) * DBI: Arbitrary code execution via caller-influenced Profile attribute (CVE-2026-14380) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
perl-dbi AlmaLinux:8
- Affected ranges
- ECOSYSTEM: < 1.641-8.module_el8.10.0+4245+6005333d
Update to 1.641-8.module_el8.10.0+4245+6005333d
Original sources
- https://access.redhat.com/errata/RHSA-2026:52772
- https://access.redhat.com/security/cve/CVE-2026-14380
- https://access.redhat.com/security/cve/CVE-2026-14739
- https://bugzilla.redhat.com/2497915
- https://bugzilla.redhat.com/2497916
- https://errata.almalinux.org/8/ALSA-2026-52772.html
- https://osv.dev/vulnerability/ALSA-2026:52772