Red Hat Security Advisory

RHSA-2026:49514

perl-DBI security update

Released 2026-08-03 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-12417 CVE-2026-14739 · GHSA-w9gf-c5hh-cc8w

MEDIUM 49

DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00413 Published 2026-07-07 Partial fix · 1.650 CWE-787

TI-2026-12153 CVE-2026-14380

MEDIUM 41

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00499 Published 2026-07-07 Partial fix · 1.650 CWE-470