Red Hat Security Advisory

RHSA-2026:62667

perl-DBI security update

Released 2026-09-02 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-12417 CVE-2026-14739 · GHSA-w9gf-c5hh-cc8w

MEDIUM 49

DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00413 Published 2026-07-07 Partial fix · 1.650 CWE-787

TI-2026-09339 CVE-2026-10879 · GHSA-c7xw-cj86-m724

MEDIUM 49

DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2026-06-05 Partial fix · 1.648 CWE-787

TI-2026-08500 CVE-2026-9698 · GHSA-83j7-3c78-fq8j

MEDIUM 48

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2026-06-09 Partial fix · 1.648 CWE-787

TI-2026-12153 CVE-2026-14380

MEDIUM 41

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00499 Published 2026-07-07 Partial fix · 1.650 CWE-470