Advisories » MGASA-2026-0551

Updated perl-DBI package fixes security vulnerabilities

Publication date: 27 Oct 2026
Modification date: 27 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-108518 , CVE-2026-111879

Description

dbi_profile(): crash (type confusion) when a database handle is
destroyed while its Profile Path contains {attr} elements.
(CVE-2026-108518)
Failed DBD::DBM file creation left lock files in place.
(CVE-2026-111879)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36556
• https://www.openwall.com/lists/oss-security/2026/10/20/37
• https://github.com/perl5-dbi/dbi/security/advisories/GHSA-7393-6f8r-fhh3
• https://www.openwall.com/lists/oss-security/2026/10/20/38
• https://github.com/perl5-dbi/dbi/security/advisories/GHSA-8cx8-9vj9-9x7j
• https://metacpan.org/release/HMBRAND/DBI-1.656/changes
• https://www.cve.org/CVERecord?id=CVE-2026-108518
• https://www.cve.org/CVERecord?id=CVE-2026-111879

SRPMS

10/core

• perl-DBI-1.656.0-1.mga10