Уязвимость perl-DBI

Уязвимость perl-DBI

DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not allocate enough memory to handle approximately 1.2-million placeholders. DBI version 1.650 sets a hard limit of 99,999 placeholders.

Security update for perl-DBI

Security update for perl-DBI

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an application can trigger a buffer overflow.

ELSA-2026-38901: perl-DBI:1.641 security update (IMPORTANT)

ELSA-2026-38513: perl-DBI security update (IMPORTANT)

ELSA-2026-38512: perl-DBI security update (IMPORTANT)