Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:62667

Опубликовано: 03 сент. 2026
Источник: rocky
Оценка: Important

Описание

Important: perl-DBI security update

DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used.

Security Fix(es):

  • perl-DBI: perl-DBI: Heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution. (CVE-2026-10879)

  • DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698)

  • DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute (CVE-2026-14380)

  • DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
perl-DBIaarch642.el8_10perl-DBI-1.641-2.el8_10.aarch64.rpm
perl-DBIx86_642.el8_10perl-DBI-1.641-2.el8_10.x86_64.rpm

Показывать по

Связанные уязвимости

oracle-oval
2 месяца назад

ELSA-2026-62667-0: perl-DBI security update (IMPORTANT)

CVSS3: 9.8
altlinux
3 месяца назад

ALT-PU-2026-12409: package `perl-DBI` update to version 1.651-alt1

CVSS3: 9.8
fstec
4 месяца назад

Уязвимость интерфейса для подключения и работы с базами данных perl-DBI, связанная с записью за границами буфера в памяти, позволяющая нарушителю выполнить произвольный код

suse-cvrf
5 месяцев назад

Security update for perl-DBI

suse-cvrf
4 месяца назад

Security update for perl-DBI