Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.3
Red Hat Perl DBI may let attackers access databases
published 1 month ago
Summary
The Perl DBI library used on Red Hat systems can be tricked into running code that accesses or changes data in your databases. This could let an attacker view or modify information without permission. Update the perl-dbi packages to the latest version to close the risk.
What to do
- Update redhat perl-dbi to version 0:1.641-10.module+el8.10.0+24875+bc962974.
- Update redhat perl-dbi-debuginfo to version 0:1.641-10.module+el8.10.0+24875+bc962974.
- Update redhat perl-dbi-debugsource to version 0:1.641-10.module+el8.10.0+24875+bc962974.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:8::appstream | redhat | perl-dbi |
< 0:1.641-10.module+el8.10.0+24875+bc962974 Fix: upgrade to 0:1.641-10.module+el8.10.0+24875+bc962974
|
| Red Hat:enterprise_linux:8::appstream | redhat | perl-dbi-debuginfo |
< 0:1.641-10.module+el8.10.0+24875+bc962974 Fix: upgrade to 0:1.641-10.module+el8.10.0+24875+bc962974
|
| Red Hat:enterprise_linux:8::appstream | redhat | perl-dbi-debugsource |
< 0:1.641-10.module+el8.10.0+24875+bc962974 Fix: upgrade to 0:1.641-10.module+el8.10.0+24875+bc962974
|
Original advisory text
Red Hat Security Advisory: perl-DBI:1.641 security update
References
- https://access.redhat.com/errata/RHSA-2026:69112 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2516959 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69112.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-73194 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-73194 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-73194 Vendor Advisory
- https://github.com/perl5-dbi/dbi/commit/29b72ae7d2a8114a734a55840bf1c45b89207809... Third Party Advisory
- https://github.com/perl5-dbi/dbi/security/advisories/GHSA-623j-hfpc-mrc4 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-10879 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-14739 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published21 Sep 2026
Updated21 Sep 2026
First seen21 Sep 2026
Sources
RHSA-2026:69112 · OSV
Track software like this
Free during beta