libdbi-perl - Debian Package Tracker

general

source: libdbi-perl (main)
version: 1.656-1
maintainer: Debian Perl Group (archive) (DMD) (LowNMU)
uploaders: Damyan Ivanov (DMD) – gregor herrmann (DMD) – Niko Tyni (DMD) – Ansgar Burchardt (DMD) – Xavier Guimard (DMD)
arch: any
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.643-3
o-o-sec: 1.643-3+deb11u2
oldstable: 1.643-4+deb12u1
old-sec: 1.643-4+deb12u3
old-p-u: 1.643-4+deb12u1
stable: 1.647-1+deb13u1
stable-sec: 1.652-2~deb13u1
stable-p-u: 1.656-1~deb13u1
testing: 1.656-1
unstable: 1.656-1

versioned links

1.643-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.643-3+deb11u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.643-4+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.643-4+deb12u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.647-1+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.652-2~deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.656-1~deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.656-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libdbi-perl (5 bugs: 0, 2, 3, 0)

action needed

2 security issues in bookworm high

There are 2 open security issues in bookworm.

2 important issues:

CVE-2026-108518: DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element. An {attr} element names a database handle attribute, which dbi_profile reads from the handle's inner hash. It expects the inner handle as a reference and dereferences it, but a handle that is being destroyed hands back the inner hash itself, so the dereference yields the hash's bucket array. A type check on that pointer usually fails and the call goes unprofiled. When the memory it addresses passes the check, the attribute lookup dereferences a NULL or invalid pointer and the process dies on SIGSEGV. The Path is set by the application, by the Profile handle attribute, or by the DBI_PROFILE environment variable, so `DBI_PROFILE={ImplementorClass}` can crash an unmodified program.
CVE-2026-111879: DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock. open_data creates the table's lock file and takes an exclusive flock on it for a CREATE, before the checks that can croak: a dbm_mldbm value that is not a module name, a failing tie, or a missing data file. The croak unwinds before the table object is blessed, so nothing releases the lock, and the meta data holding the open descriptor stays cached on the database handle. The dbm_mldbm and dbm_type values come from the DSN or the connect attributes, so a caller that chooses the serializer or the storage backend can trigger the failure. The flock has no timeout, so a later open of that table (even through a separate database handle) blocks for as long as the handle holding the stale lock lives, in the same process or any other.

Created: 2026-10-20 Last update: 2026-11-09 22:30

lintian reports 32 warnings normal

Lintian reports 32 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2026-10-06 Last update: 2026-11-13 07:01

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1.656-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 9681135580c05b0e048a77c03269aeeef6f3ddb8
Author: gregor herrmann <gregoa@debian.org>
Date:   Sat Nov 7 22:49:00 2026 +0100

    update changelog
    
    Gbp-Dch: Ignore

commit 049c6788484345d6ee0d57fa3b1631ef53288ec2
Author: gregor herrmann <gregoa@debian.org>
Date:   Sat Nov 7 22:49:00 2026 +0100

    Convert debian/watch to version 5.

Created: 2026-11-07 Last update: 2026-11-09 22:01

debian/patches: 1 patch to forward upstream low

Among the 3 debian patches available in version 1.656-1 of the package, we noticed the following issues:

1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2026-10-23 08:32

testing migrations

This package is part of the ongoing testing transition known as perl-5.44. Please avoid uploads unrelated to this transition, they would likely delay it and require supplementary work from the release managers. On the other hand, if your package has problems preventing it to migrate to testing, please fix them as soon as possible. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2026-11-10] Accepted libdbi-perl 1.656-1~deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2026-10-25] libdbi-perl 1.656-1 MIGRATED to testing (Debian testing watch)
[2026-10-23] Accepted libdbi-perl 1.656-1 (source) into unstable (gregor herrmann)
[2026-10-11] libdbi-perl 1.655-1 MIGRATED to testing (Debian testing watch)
[2026-10-05] Accepted libdbi-perl 1.655-1 (source) into unstable (gregor herrmann)
[2026-10-01] libdbi-perl 1.654-1 MIGRATED to testing (Debian testing watch)
[2026-09-28] Accepted libdbi-perl 1.643-4+deb12u3 (source) into oldstable-security (Guilhem Moulin)
[2026-09-27] Accepted libdbi-perl 1.654-1 (source) into unstable (gregor herrmann)
[2026-09-16] libdbi-perl 1.653-1 MIGRATED to testing (Debian testing watch)
[2026-09-12] Accepted libdbi-perl 1.653-1 (source) into unstable (gregor herrmann)
[2026-08-31] Accepted libdbi-perl 1.652-2~deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2026-08-31] Accepted libdbi-perl 1.643-3+deb11u2 (source) into oldoldstable-security (Guilhem Moulin)
[2026-08-31] Accepted libdbi-perl 1.643-4+deb12u2 (source) into oldstable-security (Guilhem Moulin)
[2026-08-27] Accepted libdbi-perl 1.652-2~deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2026-08-25] libdbi-perl 1.652-2 MIGRATED to testing (Debian testing watch)
[2026-08-19] Accepted libdbi-perl 1.652-2 (source) into unstable (gregor herrmann)
[2026-08-15] Accepted libdbi-perl 1.652-1 (source) into unstable (gregor herrmann)
[2026-07-18] libdbi-perl 1.651-1 MIGRATED to testing (Debian testing watch)
[2026-07-15] Accepted libdbi-perl 1.651-1 (source) into unstable (gregor herrmann)
[2026-07-11] libdbi-perl 1.650-1 MIGRATED to testing (Debian testing watch)
[2026-07-08] Accepted libdbi-perl 1.650-1 (source) into unstable (gregor herrmann)
[2026-07-08] libdbi-perl 1.649-1 MIGRATED to testing (Debian testing watch)
[2026-07-05] Accepted libdbi-perl 1.649-1 (source) into unstable (gregor herrmann)
[2026-06-26] Accepted libdbi-perl 1.643-3+deb11u1 (source) into oldoldstable-security (Guilhem Moulin)
[2026-06-25] libdbi-perl 1.648-1 MIGRATED to testing (Debian testing watch)
[2026-06-11] Accepted libdbi-perl 1.647-1+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2026-06-11] Accepted libdbi-perl 1.643-4+deb12u1 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2026-06-11] Accepted libdbi-perl 1.647-1+deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2026-06-11] Accepted libdbi-perl 1.643-4+deb12u1 (source) into oldstable-security (Debian FTP Masters) (signed by: Salvatore Bonaccorso)
[2026-06-06] Accepted libdbi-perl 1.648-1 (source) into unstable (gregor herrmann)

bugs [bug history graph]

all: 3 5
RC: 0
I&N: 2
M&W: 1 3
F&P: 0
patch: 0

links

homepage
lintian (0, 32)
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.652-2
2 bugs