-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jun 2026 23:47:20 +0200 Source: libdbi-perl Architecture: source Version: 1.643-3+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Changes: libdbi-perl (1.643-3+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * Fix CVE-2026-9698: Buffer overflow in the error reporting handling. * Fix CVE-2026-10879: Heap overflow when preparsing SQL statements with 10 or more binders. Checksums-Sha1: 9bcad7f6b7d0d60b0fa9f17e16518a0d741ddc07 2253 libdbi-perl_1.643-3+deb11u1.dsc fdbe7a86873eed196be5f9753aabed5c1e22f2cb 612372 libdbi-perl_1.643.orig.tar.gz fbb9c39c0aa3cf33160a110e1f0ad1a39923368e 15764 libdbi-perl_1.643-3+deb11u1.debian.tar.xz 9b0887d5b62e681e13ef06e548ddd10a9a9ce9d5 5899 libdbi-perl_1.643-3+deb11u1_source.buildinfo Checksums-Sha256: 7b33558b15222ead700b1a0ec37e18debdbd5d5b8f679bb299b34074a5137fb8 2253 libdbi-perl_1.643-3+deb11u1.dsc 8a2b993db560a2c373c174ee976a51027dd780ec766ae17620c20393d2e836fa 612372 libdbi-perl_1.643.orig.tar.gz cc4d4dd0974aae705aeedf5af93c159ae55342750eacdff814ecf7a7d517a8f4 15764 libdbi-perl_1.643-3+deb11u1.debian.tar.xz 17a4acf0e2b750172fc01a19b8b672fc83ff68155497cf53685ba93949f4cb8e 5899 libdbi-perl_1.643-3+deb11u1_source.buildinfo Files: b4ece103c792d541078a1b30cc27822c 2253 perl optional libdbi-perl_1.643-3+deb11u1.dsc 352f80b1e23769c116082a90905d7398 612372 perl optional libdbi-perl_1.643.orig.tar.gz c44971eb79795516cb41ef0abe0d4306 15764 perl optional libdbi-perl_1.643-3+deb11u1.debian.tar.xz 457c05f271425891116b39e5878a449e 5899 perl optional libdbi-perl_1.643-3+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmo9+eYACgkQ05pJnDwh pVKMpQ/9EZVohjinmlZ2ixe08KcrCyxAcY8uCwU50Kr0+vihgSbrX2bXzsFxzsVy HqaHOV39EPf74B+SCq4mB5zeFMsMaotrEI0W8PMN+UnnVA0AKhJEN+TJMm+QUMY2 RGxqmOXXSaTX/jZ3+IBrJjYI5LZztb94lbjVkbflYw7Bdheg7NrHKPE1/AA2B7gk Aiav5XVSYK6lSo4IOLqQyt7qQCX2Kzb+kVwJAiELB7XyQHzMhuvNkJ5y8I415atD JOW0aviTgYXvn+VCdV34IldfLDDRL2iR7uRlKvlkwRR33xvnB5deqalICurdfaoe FUktiuckQclC4t8gQvlern4fErFmo4kucUV0OQTM4AqMpUr+lpsjo6XlQgBAVb8D aiX/JDEh+Jx54eTKgZKrfFP3vNhHWGMtLBCAL9Xyzp0BuD0IHWD0IcqZipavKl3v vYAE78d96pZRLGCHxSpTqwmgKetY4MlLe5gRh6hS7LOE3BlrO56IgoyWucPkzG9W /pAdSDv57gzyQV0KmVzit1hK4Dg6T99EgK8GIr90zDW2sG/RXdZl4gdsbax8UYSr RkHKkZRDh0/8qqlN8dej20OpJAtWwsLQotNF6Zbqcxl0+tfOg1fHa6C9rkbe19Tu UQCwVG3PlM5HjmTb6dJCAwylFIs3IzCqmp3Cn/KPQ56OqOWDnaQ= =DuJI -----END PGP SIGNATURE-----