Updated perl-DBI package fixes security vulnerabilities
Publication date: 12 Oct 2026Modification date: 12 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-78030 , CVE-2026-88815 , CVE-2026-88816
Description
DBI versions before 1.653 for Perl load arbitrary modules via
unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM.
(CVE-2026-78030)
DBI versions before 1.654 for Perl incorrectly treat numeric values as
strings in sql_type_cast_svpv. (CVE-2026-88815)
DBI versions before 1.654 for Perl incorrectly treat numeric values as
strings in FetchHashKeyName. (CVE-2026-88816)
References
- https://bugs.mageia.org/show_bug.cgi?id=36312
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X2QBTFMS57S7DYK666C4OQBHWDRGW3Q7/
- https://www.openwall.com/lists/oss-security/2026/09/19/4
- https://www.openwall.com/lists/oss-security/2026/09/28/12
- https://www.openwall.com/lists/oss-security/2026/09/28/13
- https://www.cve.org/CVERecord?id=CVE-2026-78030
- https://www.cve.org/CVERecord?id=CVE-2026-88815
- https://www.cve.org/CVERecord?id=CVE-2026-88816
SRPMS
10/core
- perl-DBI-1.655.0-1.mga10