rpms/perl-DBI
7
0
Fork 0
Code Issues Pull Requests Releases Activity
A database access API for perl
6 Commits 13 Branches 38 Tags 252 KiB
RPM Spec 100%
c9s
Go to file
RHEL Packaging Agent 253aeefbb0 Fix CVE-2026-9698: stack and buffer overflow in perl-DBI 
Backport two upstream fixes for CVE-2026-9698 to perl-DBI:

- Fix possible stack overflow in XS_DBI_dispatch by replacing
  a fixed-size char[200] buffer with dynamic newSVpvf() allocation.
- Fix buffer overflow in preparse() by increasing the allocation
  from strlen(statement)*3 to strlen(statement)*6+16 to account
  for longer placeholder replacements.

Both fixes are combined in a single patch file
DBI-1.643-Fix-CVE-2026-9698.patch.

CVE: CVE-2026-9698
Upstream patches:
 - bfe5d73c16.patch
 - af79036c07.patch
Resolves: RHEL-184983

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-30 10:08:50 +00:00
.gitignore RHEL 9.0.0 Alpha bootstrap 2020-10-15 23:57:31 +02:00
DBI-1.643-Fix-CVE-2026-9698.patch Fix CVE-2026-9698: stack and buffer overflow in perl-DBI 2026-07-30 10:08:50 +00:00
perl-DBI.rpmlintrc RHEL 9.0.0 Alpha bootstrap 2020-10-15 23:57:31 +02:00
perl-DBI.spec Fix CVE-2026-9698: stack and buffer overflow in perl-DBI 2026-07-30 10:08:50 +00:00
sources RHEL 9.0.0 Alpha bootstrap 2020-10-15 23:57:31 +02:00