Package "libdbi-perl"
| Name: |
libdbi-perl
|
Description: |
Perl Database Interface (DBI)
|
| Latest version: |
1.647-1ubuntu0.26.04.4 |
| Release: |
resolute (26.04) |
| Level: |
security |
| Repository: |
main |
| Homepage: |
https://dbi.perl.org/ |
Links
Download "libdbi-perl"
Other versions of "libdbi-perl" in Resolute
Changelog
|
libdbi-perl (1.647-1ubuntu0.26.04.4) resolute-security; urgency=medium
* SECURITY UPDATE: Unsafe Reflection
- debian/patches/CVE-2026-78030.patch: Load serializer class using
Module::Load
- CVE-2026-78030
* SECURITY UPDATE: Type Confusion
- debian/patches/CVE-2026-88816.patch: Fix FetchHashKeyName on IV/NV
- CVE-2026-88816
-- Bruce Cable Fri, 09 Oct 2026 13:53:56 +1100
|
| Source diff to previous version |
| CVE-2026-78030 |
DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM. DBD::DBM passes the dbm_typ |
| CVE-2026-88816 |
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrow_hashref uses the string pointer of the |
|
|
libdbi-perl (1.647-1ubuntu0.26.04.3) resolute-security; urgency=medium
* SECURITY UPDATE: Denial of Service
- debian/patches/CVE-2026-73193.patch: Limit statements to 292 Mb in
preparse (CVE-2026-73193)
- debian/patches/CVE-2026-73194.patch: Force placeholder limit on :#
and :p# too (CVE-2026-73194)
- CVE-2026-73193
- CVE-2026-73194
-- Bruce Cable Thu, 24 Sep 2026 16:32:27 +1000
|
| Source diff to previous version |
| CVE-2026-73193 |
DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by pr |
| CVE-2026-73194 |
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. |
|
|
libdbi-perl (1.647-1ubuntu0.26.04.1) resolute-security; urgency=medium
* SECURITY UPDATE: stack buffer overflow
- debian/patches/CVE-2026-9698.patch: replace static sprintf buffer with
dynamic newSVpvf formatting in DBI.xs.
- CVE-2026-9698
* SECURITY UPDATE: heap buffer overflow
- debian/patches/CVE-2026-10879.patch: increases buffer allocation size to
safely accommodate multi-digit placeholder expansion in DBI.xs.
- CVE-2026-10879
-- Ian Constantin <email address hidden> Mon, 22 Jun 2026 10:05:09 +0300
|
| CVE-2026-9698 |
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleEr |
| CVE-2026-10879 |
DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL pla |
|
About
-
Send Feedback to @ubuntu_updates
