Red Hat Security Advisory

RHSA-2026:52772

perl-DBI:1.641 security update

Released 2026-08-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) perl-DBI-1.641-8.module+el8.10.0+24620+2953b6e4.aarch64::perl-DBI:1.641, perl-DBI-1.641-8.module+el8.10.0+24620+2953b6e4.ppc64le::perl-DBI:1.641, perl-DBI-1.641-8.module+el8.10.0+24620+2953b6e4.s390x::perl-DBI:1.641 +7

TI-2026-12417 CVE-2026-14739 · GHSA-w9gf-c5hh-cc8w

MEDIUM 49

DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00413 Published 2026-07-07 Partial fix · 1.650 CWE-787

TI-2026-12153 CVE-2026-14380

MEDIUM 41

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00499 Published 2026-07-07 Partial fix · 1.650 CWE-470