Accepted libdbi-perl 1.643-4+deb12u3 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 15 Sep 2026 11:56:01 +0200
Source: libdbi-perl
Architecture: source
Version: 1.643-4+deb12u3
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Changes:
 libdbi-perl (1.643-4+deb12u3) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * Fix CVE-2026-78030: Arbitrary module and file loading via dbm_type/
     dbm_mldbm.
   * Fix CVE-2026-88815: Memory corruption vulnerability due to unsafe
     DBI::sql_type_cast on IV/NV.
   * Fix CVE-2026-88816: Memory corruption vulnerability due to missing
     stringification of hash key names.
   * Add follow-up upstream change for CVE-2026-73193: Fix integer overflow
     after strlen().
   * Add follow-up upstream change for CVE-2026-73194: Detect atoi() integer
     overflow.
   * Add follow-up upstream change for CVE-2026-15392: Tighten symlink outside
     of f_dir check.
Checksums-Sha1:
 f649dda8fed25fba11e081fbac2220a1a083efc1 2253 libdbi-perl_1.643-4+deb12u3.dsc
 9c23450a2e92b79a12c209d991ee168941a29204 29472 libdbi-perl_1.643-4+deb12u3.debian.tar.xz
 ceac5fd6cdf753ccf74e696a22b2def27bd93cdd 6264 libdbi-perl_1.643-4+deb12u3_source.buildinfo
Checksums-Sha256:
 73a9c5c956104cd95e478f2f5e145937fe669f43a5b692f017850d32ffcd5aef 2253 libdbi-perl_1.643-4+deb12u3.dsc
 9c1add790bd3da7e1022284afe0175701cb51ab75eca854aba6fe1605d3a2439 29472 libdbi-perl_1.643-4+deb12u3.debian.tar.xz
 5071d753fde457d242176ec0f8866fb7c31c7d907c375005887d03353f6e44e7 6264 libdbi-perl_1.643-4+deb12u3_source.buildinfo
Files:
 e2503ce5cbc45428517195ff2dd7f0f5 2253 perl optional libdbi-perl_1.643-4+deb12u3.dsc
 740cfa073a33083a95e540871e81d2d9 29472 perl optional libdbi-perl_1.643-4+deb12u3.debian.tar.xz
 bf7f3b7cde4388d45cb6be0da7a6ce54 6264 perl optional libdbi-perl_1.643-4+deb12u3_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmq6urIACgkQ05pJnDwh
pVJb0g/7BmvXC3e/QVZGISCfiuWFgFduzKCX8yebFPhQ2yNG48IGrtLYDz4t6bMg
b3kjyakX8h/p8svZ1EgJCrO289va+coh9bwhs3Liezhrap1oCK6wQ6GydsIfgDNC
mSojnvn2lU2GRG8DvxzEz/M8ys1tVPbf9/FKBvDgg22xjwO6g4EPbAnvYgB+BFMC
bLKG0sWRydMRGHTktBVM/zYhBYQ1OkRS9dWGUHBn0PgXgGZBd30FWNnGuZNd9sCv
EAsJRih5HRYsgX+2dhWkNzqQxamN0kNI5TzDv4bwz9baU3/pMsIjY6mv0GUuImJR
M4vtQmcE5EFPSjtfeVoqH/H+M4QNkK/1tBheYbdiklJSj/DVxrO2V99fEpgOM9qV
/OCTXcCjXV3FMBuwwjpFHKuGTauG+VePTbJXMFFTvssCMM75iIIperjB5A6Krfqf
nYdWMH4tgz/i99Si1Mww/IVxkk1pU1Gf5xkYOtV7mCF8n9WF7psg+V7sbAjYovU5
8o2nhuWZ6ZL31VGy8vGNPMRoQOwvEXH0AZ9mX4j/djSVnYH9tlXh3Px0+bVIM1m/
m9KEGz8uAREj9uDru5QyEf0f65A5suBvqOy8Y1nVfpuz1/tIoBbO1f/tqoDZHtm4
84wIzR6V6pRXIvUhWxQ0MZ96Z2RdKsS/90mb8b5mGQ4wGBYqpYY=
=sLZL
-----END PGP SIGNATURE-----