Package "libdbi-perl"
| Name: |
libdbi-perl
|
Description: |
Perl Database Interface (DBI)
|
| Latest version: |
1.643-4ubuntu0.3 |
| Release: |
noble (24.04) |
| Level: |
updates |
| Repository: |
main |
| Homepage: |
https://dbi.perl.org/ |
Links
Download "libdbi-perl"
Other versions of "libdbi-perl" in Noble
Changelog
|
libdbi-perl (1.643-4ubuntu0.3) noble-security; urgency=medium
* SECURITY UPDATE: Denial of Service
- debian/patches/CVE-2026-73193.patch: Limit statements to 292 Mb in
preparse (CVE-2026-73193)
- debian/patches/CVE-2026-73194.patch: Force placeholder limit on :#
and :p# too (CVE-2026-73194)
- CVE-2026-73193
- CVE-2026-73194
-- Bruce Cable Thu, 24 Sep 2026 16:10:15 +1000
|
| Source diff to previous version |
| CVE-2026-73193 |
DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by pr |
| CVE-2026-73194 |
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. |
|
|
libdbi-perl (1.643-4ubuntu0.1) noble-security; urgency=medium
* SECURITY UPDATE: stack buffer overflow
- debian/patches/CVE-2026-9698.patch: replace static sprintf buffer with
dynamic newSVpvf formatting in DBI.xs.
- CVE-2026-9698
* SECURITY UPDATE: heap buffer overflow
- debian/patches/CVE-2026-10879.patch: increases buffer allocation size to
safely accommodate multi-digit placeholder expansion in DBI.xs.
- CVE-2026-10879
-- Ian Constantin <email address hidden> Mon, 22 Jun 2026 10:05:12 +0300
|
| CVE-2026-9698 |
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleEr |
| CVE-2026-10879 |
DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL pla |
|
About
-
Send Feedback to @ubuntu_updates
