28 matches found
MGASA-2026-0486 Updated perl-DBI package fixes security vulnerabilities
DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbmtype and dbmmldbm attributes in DBD::DBM. CVE-2026-78030 DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sqltypecastsvpv. CVE-2026-88815 DBI versions before 1.654 for Perl incorrectly...
Updated perl-DBI package fixes security vulnerabilities
DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbmtype and dbmmldbm attributes in DBD::DBM. CVE-2026-78030 DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sqltypecastsvpv. CVE-2026-88815 DBI versions before 1.654 for Perl incorrectly...
Security update for perl-DBI
This update for perl-DBI fixes the following issues: CVE-2026-78030: arbitrary modules loaded due to unvalidated dbmtype and dbmmldbm attributes in DBD::DBM bsc1281704. CVE-2026-88815: numeric value incorrectly treated as strings in sqltypecastsvpv allows for process crash bsc1283055...
SUSE-SU-2026:4612-1 Security update for perl-DBI
This update for perl-DBI fixes the following issues: - CVE-2026-78030: arbitrary modules loaded due to unvalidated dbmtype and dbmmldbm attributes in DBD::DBM bsc1281704. - CVE-2026-88815: numeric value incorrectly treated as strings in sqltypecastsvpv allows for process crash bsc1283055. -...
Fedora 44 : perl-DBI (2026-6d3a15e9c3)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6d3a15e9c3 advisory. 1.655 - Fix for C89; Ignore invalid handles consistently ---- 1.654 bump Fix CVE-2026-88815 DBI::sqltypecast on IV/NV Fix CVE-2026-88816...
SUSE SLES12 Security Update : perl-DBI (SUSE-SU-2026:4442-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4442-1 advisory. - CVE-2026-88815: numeric value incorrectly treated as strings in sqltypecastsvpv allows for process crash bsc1283055. -...
Security update for perl-DBI
This update for perl-DBI fixes the following issues: CVE-2026-88815: numeric value incorrectly treated as strings in sqltypecastsvpv allows for process crash bsc1283055. CVE-2026-88816: numeric value incorrectly treated as strings in FetchHashKeyName allows for process crash bsc1283056. Patch...
SUSE-SU-2026:4442-1 Security update for perl-DBI
This update for perl-DBI fixes the following issues: - CVE-2026-88815: numeric value incorrectly treated as strings in sqltypecastsvpv allows for process crash bsc1283055. - CVE-2026-88816: numeric value incorrectly treated as strings in FetchHashKeyName allows for process crash bsc1283056...
Fedora 45 : perl-DBI (2026-5fb5fb6508)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5fb5fb6508 advisory. 1.655 - Fix for C89; Ignore invalid handles consistently ---- 1.654 bump Fix CVE-2026-88815 DBI::sqltypecast on IV/NV Fix CVE-2026-88816...
SUSE CVE-2026-88816
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrowhashref uses the string pointer of the FetchHashKeyName attribute as the key name without stringifying it first. When FetchHashKeyName has been set to an integer IV or floating-point NV...
Debian dla-4798 : libdbi-perl - security update
The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4798 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4798-1 [email protected]...
[SECURITY] [DLA 4798-1] libdbi-perl security update
Debian LTS Advisory DLA-4798-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin September 28, 2026 https://wiki.debian.org/LTS Package : libdbi-perl Version : 1.643-4+deb12u3 CVE ID : CVE-2026-78030 CVE-2026-88815 CVE-2026-88816 Debian Bug : 1149042 Vulnerabilities...
DEBIAN-CVE-2026-88816
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrowhashref uses the string pointer of the FetchHashKeyName attribute as the key name without stringifying it first. When FetchHashKeyName has been set to an integer IV or floating-point NV...
CVE-2026-88816
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrowhashref uses the string pointer of the FetchHashKeyName attribute as the key name without stringifying it first. When FetchHashKeyName has been set to an integer IV or floating-point NV...
AZL-105215 CVE-2026-88816 affecting package perl-DBI 1.652-1
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrowhashref uses the string pointer of the FetchHashKeyName attribute as the key name without stringifying it first. When FetchHashKeyName has been set to an integer IV or floating-point NV...
CVE-2026-88816
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrowhashref uses the string pointer of the FetchHashKeyName attribute as the key name without stringifying it first. When FetchHashKeyName has been set to an integer IV or floating-point NV...
UBUNTU-CVE-2026-88816
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrowhashref uses the string pointer of the FetchHashKeyName attribute as the key name without stringifying it first. When FetchHashKeyName has been set to an integer IV or floating-point NV...
CVE-2026-88816
A flaw was found in perl-DBI. An attacker or user capable of supplying a numeric value to the FetchHashKeyName attribute can cause a Denial of Service DoS. The fetchrowhashref function attempts to use the attribute value as a string pointer without stringifying it first, leading to an invalid...
CVE-2026-88816 DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrowhashref uses the string pointer of the FetchHashKeyName attribute as the key name without stringifying it first. When FetchHashKeyName has been set to an integer IV or floating-point NV...
CVE-2026-88816
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrowhashref uses the string pointer of the FetchHashKeyName attribute as the key name without stringifying it first. When FetchHashKeyName has been set to an integer IV or floating-point NV...