-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 08 Jul 2026 18:31:30 +0200 Source: libdbi-perl Architecture: source Version: 1.650-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1141667 Changes: libdbi-perl (1.650-1) unstable; urgency=medium . * Import upstream version 1.650. - Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739) - Fix out-of-bounds read in preparse of SQL that starts with a comment (CVE-2026-14740) - Fix code injection via Profile DSN attribute or DBI_PROFILE variable (CVE-2026-14380) Closes: #1141667 * Install new upstream document. Checksums-Sha1: fe3d5b723b20d6baadb620271e1dc010b252ed2c 2433 libdbi-perl_1.650-1.dsc 63eda1d88d42ca6b3e1c5afec157c905c20c40d1 731654 libdbi-perl_1.650.orig.tar.gz a4987decdf8ee8e01e4eae8fbf2be56ec62d1311 13344 libdbi-perl_1.650-1.debian.tar.xz Checksums-Sha256: d8267d5983ebbf8c2c3d961aa257e9a6500e110569deebd8c604902af3adf4c2 2433 libdbi-perl_1.650-1.dsc a807b817c1cfb0fe6ecccff1d9ddeb293c317d518f5ab2007dfb9d3bccdbcf83 731654 libdbi-perl_1.650.orig.tar.gz 23b7465d79d2fb414749399b04ceb7df33e92a518b5d00a7e07b34ae9073b60f 13344 libdbi-perl_1.650-1.debian.tar.xz Files: c550ae1ce69a05b8d931891d26f3b203 2433 perl optional libdbi-perl_1.650-1.dsc 1060f40a61392a8d6989cf76509289b7 731654 perl optional libdbi-perl_1.650.orig.tar.gz 14c7a5b46ee2070cf2608ee874a45688 13344 perl optional libdbi-perl_1.650-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmpOfFFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgYngg/7Bv/RwYXIZv6LNR/+jRIsn6fGrXqd2IX4ITti+uh8UdbkYmb00/F5BLVD +JDztRfQwqRD9BseeSYsU3n5K99Rs8b9VrT+xZkDEQ22/W89z07PAfcqJynXRvrc qfZH7b9ZWu2B9OBElrEnnEUKitKV5WSAPz1zErp64aOKzLwRx4Whu8vnzMRzHCi1 qQGIn4Inlb/GvQHciBQTC2kQaggREvKHpyF9kzYFfcV3XNvKdOj1oYvsRTdiQ8AV TAKCFpwzelLeFwRzowvPH2G9DKHbBYBcs+o+6VAb2LGe1pJuVDQpo+Tn7e/aEJB7 QZDQ+rBPsnQo9WwrIwBTXozAXPhaLCWRE/5rq+yNfsewgg0nQi1SUxh8Hp2IDAMU POCw7PcAmDScrNwMuW0Ds99zSsjeCx5Z9r7qBgvPXMlxw9EkUG6vQZo3gBoBKj9u 0luN/dP9+2EOSSTpT660W2ZEB4+bQz6a8o8OQBRvz/FXWRgWWnW1wd9qsL8VFKxV UaimYB0uXDu7LJv86B3zytOR+mOkpoDBH617IqBQDvNaHNr2mRHO+v3LFbr5MYgH 4qLF5fzU/AJW3YZDRH1cIu1drUebeNEi7uW4J6dTqjK42Im1C5nB8r4eKzHrucUx T8op993EgcZKAy2VsF5jU8izrTO10bLucEv2jdj/RS7fh/LxXW0= =zY4d -----END PGP SIGNATURE-----
