[ubuntu/resolute-security] libdbi-perl 1.647-1ubuntu0.26.04.1 (Accepted)

Ian Constantin ian.constantin at canonical.com
Wed Jun 24 08:12:33 UTC 2026


libdbi-perl (1.647-1ubuntu0.26.04.1) resolute-security; urgency=medium

  * SECURITY UPDATE: stack buffer overflow
    - debian/patches/CVE-2026-9698.patch: replace static sprintf buffer with
      dynamic newSVpvf formatting in DBI.xs.
    - CVE-2026-9698
  * SECURITY UPDATE: heap buffer overflow
    - debian/patches/CVE-2026-10879.patch: increases buffer allocation size to
      safely accommodate multi-digit placeholder expansion in DBI.xs.
    - CVE-2026-10879

Date: 2026-06-22 08:43:20.440548+00:00
Changed-By: Ian Constantin <ian.constantin at canonical.com>
https://launchpad.net/ubuntu/+source/libdbi-perl/1.647-1ubuntu0.26.04.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Resolute-changes mailing list