p PatchFirst

RLSA-2026:52772

RLSA-2026:52772 · Important: perl-DBI:1.641 security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fix(es): * DBI: Heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739) * DBI: Arbitrary code execution via caller-influenced Profile attribute (CVE-2026-14380) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS 8.8 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • perl-dbi Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.641-8.module+el8.10.0+40273+66ce089d

    Update to 0:1.641-8.module+el8.10.0+40273+66ce089d

  • perl-dbi Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.641-8.module+el8.10.0+40273+4d327a6c

    Update to 0:1.641-8.module+el8.10.0+40273+4d327a6c

  • perl-dbi Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.641-8.module+el8.10.0+40273+d479100a

    Update to 0:1.641-8.module+el8.10.0+40273+d479100a

  • perl-dbi Rocky Linux:8

    Affected ranges
    • ECOSYSTEM: < 0:1.641-8.module+el8.10.0+40273+0bbde87c

    Update to 0:1.641-8.module+el8.10.0+40273+0bbde87c

Original sources

Check your server →