ELSA-2026-49514

ELSA-2026-49514 - perl-DBI security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-08-03

Description

[1.643-26.3]
- Fix CVE-2026-14380: unsafe string eval in DBI::Profile
- Resolves: RHEL-211146

[1.643-26.2]
- Fix CVE-2026-14739: set a hard limit of 99999 on '?' placeholders
- Resolves: RHEL-193293

Related CVEs

CVE-2026-14380

CVE-2026-14739

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	perl-DBI-1.643-26.el10_2.3.src.rpm	3c090bca0cd40e5835f639b368de0477e0778e60627a3755129d13574e94804b	-	ol10_aarch64_appstream
	perl-DBI-1.643-26.el10_2.3.aarch64.rpm	434d587be1d180c87bcddec01be59a9dbe88d72e1c5daa687acff233cab45103	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	perl-DBI-1.643-26.el10_2.3.src.rpm	3c090bca0cd40e5835f639b368de0477e0778e60627a3755129d13574e94804b	-	ol10_x86_64_appstream
	perl-DBI-1.643-26.el10_2.3.x86_64.rpm	339a2457ee9d356d9b8141112cc28e9e67b993f22084793429a8161d52d3b5fc	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team