-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Aug 2026 22:00:57 +0200 Source: libdbi-perl Architecture: source Version: 1.643-4+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 1141667 1142072 1144470 1144471 Changes: libdbi-perl (1.643-4+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the LTS Team. * Fix CVE-2026-14380: String-eval code injection (closes: #1141667). * Fix CVE-2026-14739: Heap overflow when preparsing SQL statements with an extreme number of placeholders (closes: #1141667). * Fix CVE-2026-14740: Out-of-bounds read in preparse() when an initial SQL line comment is deleted (closes: #1141667). * Fix CVE-2026-15043: File-backed filter bypass in DBI::SQL::Nano due to incorrect predicate evaluation (closes: #1142072). * Fix CVE-2026-15392: Symlink escape in DBD::File (closes: #1142072). * Fix CVE-2026-60081: Denial of Service in DBI::ProfileData due to unbounded path index in profile parser (closes: #1142072). * Fix CVE-2026-60082: Out-of-bounds access in _set_fbav() when a statement handle has zero fields but a non-empty row (closes: #1142072). * Fix CVE-2026-73193: Heap out-of-bounds write on 32-bit perl due to integer wraparound (closes: #1144470). * Fix CVE-2026-73194: Heap out-of-bounds write due to unvalidated numeric placeholder (closes: #1144471). Checksums-Sha1: c007a85a90d7cc5021614cad34b19217b68fe7dd 2253 libdbi-perl_1.643-4+deb12u2.dsc 2e0348114cc5cc869aba625bf8be398ed8b59f19 24728 libdbi-perl_1.643-4+deb12u2.debian.tar.xz c107d76a35cc569dc7ab9856527c466433db7131 5901 libdbi-perl_1.643-4+deb12u2_source.buildinfo Checksums-Sha256: 82fcc42c838e02e3acc3dd04b691c19ed0add6e2f03e84375c40caba2de88514 2253 libdbi-perl_1.643-4+deb12u2.dsc 00603f07980757d0b545142e19c48cb285d63b9b9b6d355ccacef2a9cce526c4 24728 libdbi-perl_1.643-4+deb12u2.debian.tar.xz 0e7f3577a39e225482ff8a040fabe72843eefdefb545bfa63bbc59b050a8628d 5901 libdbi-perl_1.643-4+deb12u2_source.buildinfo Files: a61c45046e6531a995c77b96d157e9be 2253 perl optional libdbi-perl_1.643-4+deb12u2.dsc 39476e6dea1cc3bb7fe630d83d1d7512 24728 perl optional libdbi-perl_1.643-4+deb12u2.debian.tar.xz 4d30de3032e050054aef0f4ec179bd90 5901 perl optional libdbi-perl_1.643-4+deb12u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmqVXlMACgkQ05pJnDwh pVKeURAAoZyIKEpIdaHI0ls4hnnBh33lhJeXyy7BNMdgZyZBAXiK4Ys16tLJb6sx yiImfeTH5emcgUYTmtHNZbmAwSXvDayU6cIw++o2X+pFlN61qvtWUvB6riOMQqpt IRUr0WroIQ2RXS789QyF/pmTLrxP2pTU0Y8ZggtJxfiC7TcXaBYKB9yD0VU3Fos1 BBVRZusD7GJ5NeSYSs1Sl7wYRV9HiL2sbzugAxPldo9s/UYevPgnMfnV4qQlRrnh ZkUOerwH6GC3VoqZuKEztfniz/mMB4qOPQhBXWbg6o3dr9rRl5sju3i+Mfhy3RKB eng1TP1AkIN1+B96h8fxwOLnhTqNqpJY42Rs/VzjBLJ3JDkg9mTYDpKisDRrh4XU JAZchrOM+TrDePfy0TpS8NhxwhlhbRMeRZdJqRQIWCIdlOCQWizhnbCfpOHx7yZK hETM+cBnib7rXvgZMASedcipGRNI1wWhqpQ6HDUqObbEm7ANyxwmtUpMBcuPkk5G rIZcSl05gJvl36eAYoq20jzLyNlHqP74a+1PCy2PiUc/enDMCtc3Q+KUQa/icYxD 3YFuKAEbrBOdF7dkw2+woNPVbwowxAUZ5AX11JfQJbT/zoE1RmCPKVXDUlKwxAsE ry0hzPI1nHBXdkOf/IvKr9qFqUHQGPJguK2Rlv/wMJFdTZWXgFc= =IYm1 -----END PGP SIGNATURE-----
