RHSA-2026:52772HighCVSS 8.8

Red Hat Security Advisory: perl-DBI:1.641 security update

Published
August 10, 2026
Last Modified
November 5, 2026

🔗 CVE IDs covered (2)

CVE-2026-14380 →CVE-2026-14739 →

📋 Description

CVE-2026-14380 — DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute CVE-2026-14739 — DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders

🎯 Affected products27

  • Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-0:1.641-8.module+el8.10.0+24620+2953b6e4.aarch64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-0:1.641-8.module+el8.10.0+24620+2953b6e4.ppc64le (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-0:1.641-8.module+el8.10.0+24620+2953b6e4.s390x (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-0:1.641-8.module+el8.10.0+24620+2953b6e4.src (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-0:1.641-8.module+el8.10.0+24620+2953b6e4.x86_64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-0:1.641-8.module+el8.10.0+24620+ff0e05e9.aarch64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-0:1.641-8.module+el8.10.0+24620+ff0e05e9.ppc64le (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-0:1.641-8.module+el8.10.0+24620+ff0e05e9.s390x (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-0:1.641-8.module+el8.10.0+24620+ff0e05e9.src (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-0:1.641-8.module+el8.10.0+24620+ff0e05e9.x86_64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debuginfo-0:1.641-8.module+el8.10.0+24620+2953b6e4.aarch64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debuginfo-0:1.641-8.module+el8.10.0+24620+2953b6e4.ppc64le (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debuginfo-0:1.641-8.module+el8.10.0+24620+2953b6e4.s390x (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debuginfo-0:1.641-8.module+el8.10.0+24620+2953b6e4.x86_64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debuginfo-0:1.641-8.module+el8.10.0+24620+ff0e05e9.aarch64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debuginfo-0:1.641-8.module+el8.10.0+24620+ff0e05e9.ppc64le (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debuginfo-0:1.641-8.module+el8.10.0+24620+ff0e05e9.s390x (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debuginfo-0:1.641-8.module+el8.10.0+24620+ff0e05e9.x86_64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debugsource-0:1.641-8.module+el8.10.0+24620+2953b6e4.aarch64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debugsource-0:1.641-8.module+el8.10.0+24620+2953b6e4.ppc64le (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debugsource-0:1.641-8.module+el8.10.0+24620+2953b6e4.s390x (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debugsource-0:1.641-8.module+el8.10.0+24620+2953b6e4.x86_64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debugsource-0:1.641-8.module+el8.10.0+24620+ff0e05e9.aarch64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debugsource-0:1.641-8.module+el8.10.0+24620+ff0e05e9.ppc64le (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debugsource-0:1.641-8.module+el8.10.0+24620+ff0e05e9.s390x (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • perl-DBI-debugsource-0:1.641-8.module+el8.10.0+24620+ff0e05e9.x86_64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: To reduce the risk of arbitrary code execution, avoid setting the `DBI_PROFILE` environment variable from untrusted sources. Ensure that DSN driver-attribute clauses, particularly those used with `dbi:Driver(Profile=>SPEC):db`, are not populated with unvalidated or untrusted input. Workaround: Applications utilizing `perl-DBI` should implement robust input validation and limit the number of parameters used in SQL query placeholders, particularly when processing untrusted data. This operational control can prevent the construction of SQL statements with an excessive number of placeholders, thereby reducing the risk of triggering the heap overflow vulnerability.

🔗 References (5)