DBI before 1.656 can hang after failed DBD::DBM open (CVE-2026-111879)
A failed open_data leaves the table lock held, so a later open hangs.
Stories per day · 30 days
2 RSS
5 stories, newest first · one card per story
Stories tagged #dbi
DBI before 1.656 crashes on profile type confusion (CVE-2026-108518)
Destroying a handle under a Profile Path containing an {attr} element confuses types in dbi_profile.
USN-8912-1: Perl DBI module vulnerabilities
Ubuntu's USN-8912-1 patches Perl DBI flaws that may allow code execution or denial of service.
CVE-2026-88815: DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv
Perl DBI before 1.654 treats numeric values as strings in sql_type_cast_svpv.
CVE-2026-78030: DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM
Perl DBI before 1.653 loads arbitrary modules via unvalidated DBD::DBM dbm_type and dbm_mldbm attributes, enabling code execution with attacker-controlled attributes.