[ubuntu/noble-security] libdbi-perl 1.643-4ubuntu0.1 (Accepted)

[Ian Constantin]

libdbi-perl (1.643-4ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: stack buffer overflow
    - debian/patches/CVE-2026-9698.patch: replace static sprintf buffer with
      dynamic newSVpvf formatting in DBI.xs.
    - CVE-2026-9698
  * SECURITY UPDATE: heap buffer overflow
    - debian/patches/CVE-2026-10879.patch: increases buffer allocation size to
      safely accommodate multi-digit placeholder expansion in DBI.xs.
    - CVE-2026-10879

Date: 2026-06-22 08:42:39.886659+00:00
Changed-By: Ian Constantin <ian.constantin at canonical.com>
https://launchpad.net/ubuntu/+source/libdbi-perl/1.643-4ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.