ELSA-2026-62667-0

ELSA-2026-62667-0 - perl-DBI security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-02

Description

[1.641-2]
- Fix stack overflow and buffer overflow in DBI.xs (CVE-2026-9698)
Resolves: RHEL-211160
- Fix heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution (CVE-2026-10879)
Resolves: RHEL-227962
- Fix unsafe string eval in DBI::Profile (CVE-2026-14380)
Resolves: RHEL-211158
- Fix heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739)
Resolves: RHEL-193292
- BR: perl(blib), perl(FileHandle) for tests

Related CVEs

CVE-2026-10879

CVE-2026-14380

CVE-2026-14739

CVE-2026-9698

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	perl-DBI-1.641-2.el8_10.src.rpm	7879a77d114e9b607beb650913de82c240cd3f815d4e260b44d6736193d5187e	-	ol8_aarch64_baseos_latest
	perl-DBI-1.641-2.el8_10.src.rpm	7879a77d114e9b607beb650913de82c240cd3f815d4e260b44d6736193d5187e	-	ol8_aarch64_u10_baseos_patch
	perl-DBI-1.641-2.el8_10.aarch64.rpm	cdb364483b7d581e057dc5b14a79042349101a006c2915bd86be804a3a64e136	-	ol8_aarch64_baseos_latest
	perl-DBI-1.641-2.el8_10.aarch64.rpm	cdb364483b7d581e057dc5b14a79042349101a006c2915bd86be804a3a64e136	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	perl-DBI-1.641-2.el8_10.src.rpm	7879a77d114e9b607beb650913de82c240cd3f815d4e260b44d6736193d5187e	-	ol8_x86_64_baseos_latest
	perl-DBI-1.641-2.el8_10.src.rpm	7879a77d114e9b607beb650913de82c240cd3f815d4e260b44d6736193d5187e	-	ol8_x86_64_u10_baseos_patch
	perl-DBI-1.641-2.el8_10.x86_64.rpm	44c7363724f2303300f748934ce6aa136285f61e4870e8c3ca0f219b32b593ea	-	ol8_x86_64_baseos_latest
	perl-DBI-1.641-2.el8_10.x86_64.rpm	44c7363724f2303300f748934ce6aa136285f61e4870e8c3ca0f219b32b593ea	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team