DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an application can trigger a buffer overflow.

ELSA-2026-38901: perl-DBI:1.641 security update (IMPORTANT)

ELSA-2026-38513: perl-DBI security update (IMPORTANT)

ELSA-2026-38512: perl-DBI security update (IMPORTANT)