RHSA-2026:49612 — Security Advisory
Red Hat Security Advisory: perl-DBI security update
Severity
ImportantRed Hat Product Security
Products
Official CSAF product identity
Published · August 3, 2026
Updated · November 5, 2026
Topic
An update for perl-DBI is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used.
Security Fix(es):
-
DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute (CVE-2026-14380)
-
DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.