-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 30 Aug 2026 22:44:07 +0200 Source: libdbi-perl Architecture: source Version: 1.643-3+deb11u2 Distribution: bullseye-security Urgency: high Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 1141667 1142072 1144470 1144471 Changes: libdbi-perl (1.643-3+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * Fix CVE-2026-14380: String-eval code injection (closes: #1141667). * Fix CVE-2026-14739: Heap overflow when preparsing SQL statements with an extreme number of placeholders (closes: #1141667). * Fix CVE-2026-14740: Out-of-bounds read in preparse() when an initial SQL line comment is deleted (closes: #1141667). * Fix CVE-2026-15043: File-backed filter bypass in DBI::SQL::Nano due to incorrect predicate evaluation (closes: #1142072). * Fix CVE-2026-15392: Symlink escape in DBD::File (closes: #1142072). * Fix CVE-2026-60081: Denial of Service in DBI::ProfileData due to unbounded path index in profile parser (closes: #1142072). * Fix CVE-2026-60082: Out-of-bounds access in _set_fbav() when a statement handle has zero fields but a non-empty row (closes: #1142072). * Fix CVE-2026-73193: Heap out-of-bounds write on 32-bit perl due to integer wraparound (closes: #1144470). * Fix CVE-2026-73194: Heap out-of-bounds write due to unvalidated numeric placeholder (closes: #1144471). Checksums-Sha1: 0d2ddd2972c2311ded68755a69b37fcb161625f7 2253 libdbi-perl_1.643-3+deb11u2.dsc fdbe7a86873eed196be5f9753aabed5c1e22f2cb 612372 libdbi-perl_1.643.orig.tar.gz 56611cfb0e313bd93768aed3822b486b4d2961b7 24696 libdbi-perl_1.643-3+deb11u2.debian.tar.xz b5aee0f67069731c7c4c633ecb2894da0b55db30 5901 libdbi-perl_1.643-3+deb11u2_source.buildinfo Checksums-Sha256: 821dccbf840b3a01a3fe9c86dbe074a65e9deffcd655d9877a37c06cd03f2c17 2253 libdbi-perl_1.643-3+deb11u2.dsc 8a2b993db560a2c373c174ee976a51027dd780ec766ae17620c20393d2e836fa 612372 libdbi-perl_1.643.orig.tar.gz c4469dde1226e56601bf493c8954ec38949f24888ef26cda4375005b83297323 24696 libdbi-perl_1.643-3+deb11u2.debian.tar.xz 6daf1c244e43f58dd27bb166467f50bf233c9e05856b60dcbcb6a1448d4db61f 5901 libdbi-perl_1.643-3+deb11u2_source.buildinfo Files: 56235b3ea94209f5c4d81e9386345357 2253 perl optional libdbi-perl_1.643-3+deb11u2.dsc 352f80b1e23769c116082a90905d7398 612372 perl optional libdbi-perl_1.643.orig.tar.gz 0ba124975b612a2b44fb35b56c8d6859 24696 perl optional libdbi-perl_1.643-3+deb11u2.debian.tar.xz ab24232f471fe649cc39a3c3f556ee77 5901 perl optional libdbi-perl_1.643-3+deb11u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmqVXn4ACgkQ05pJnDwh pVJD7BAAhFjZ7rAy+BDmuUXj7ZSsA2P4mk9mFg7eObSlmJxxaxTQYH9pYlWfziSO E+4lcaCjv16sKWk4wf2E30eqYEOve/Hs9estg1cgBCJW7ybpEhZbWUnmtjaFNsMR etjfGBc6sdGvDzoROo/E+FQQW/YDswANUCawY5s8DMRKKwJ+4oGYx76kDwBxOmCH oOkUwrucyQK2BSNNNXojY27QUsnCu7tiurVQTYOc+PfvKTfYEyyi0/31pOJK1evg bvg79VqA9lh+qNWxSWV576OUUMfsJzOwjLRnoVoOWZM4JXxVEd94rmfNih5/PKa6 l0WCXKmmxyov8+quawElnojcvQBTgyw1wec9w2/imXZR8juViGlWr63aYNTxhmKR DZwG6T/gBsb9CNVUnXq5z6/K7qrGl+bLm1rCzcCqBZ9QF4N3DoivCZlXAGlcO4+p lhb0A2DNwWx0Ko8QfJMwNox3OV4rtVcOc9wZXRXw/ppnutVReOCiYMIVzT5MvGXF 22YHVO9PYXKYemfkN6dcVUerX5sSbJiCpj2e+6ryz3Zu9tcLBcl2Xpv+gA8DHpGu PrWkwvVwhvnmGevztri+d94LwpE5/3NJyf8cQKFiB3AazyWc/VxmeuBPF0maXl/T e2c7x+ic/q2jY/xtYH7N5oquMEgQE2VBlSaDPWKSxYnS9f8Aizg= =4Y0e -----END PGP SIGNATURE-----
