Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux Perl DBI allows oversized placeholders to corrupt memory
published 1 month ago
Summary
The Perl DBI module used on AlmaLinux could be tricked into accepting placeholder numbers larger than allowed, which could cause memory corruption and potentially let an attacker crash the application. This risk has been fixed by rejecting those out‑of‑range placeholders. Update the perl‑dbi package to the latest version to apply the fix.
What to do
- Update almalinux perl-dbi to version 1.643-9.el9_6.tuxcare.els4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.6 | almalinux | perl-dbi |
< 1.643-9.el9_6.tuxcare.els4 Fix: upgrade to 1.643-9.el9_6.tuxcare.els4
|
Original advisory text
perl-DBI: Fix of CVE-2026-73194
- CVE-2026-73194: reject :N placeholders outside 1..99999 in preparse()
so an oversized or overflowing number can no longer drive a heap
out-of-bounds write; add the upstream t/60preparse.t cases
so an oversized or overflowing number can no longer drive a heap
out-of-bounds write; add the upstream t/60preparse.t cases
References
- https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1790834869.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-73194 Vendor Advisory
Timeline
Published1 Oct 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1790834869 · OSV
Track software like this
Free during beta