ALSA-2026:65887

    Dashboard / Vulnerabilities / ALSA-2026:65887

    ALSA-2026:65887

    Published: 9 Sept 2026Last Modified: 10 Sept 2026

    Summary: Important: perl-DBI security update

    Details: DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fix(es): * DBI: Incomplete fix for CVE-2026-14380 DBI: Arbitrary code execution via caller-influenced Profile attribute (CVE-2026-19546) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    References: https://access.redhat.com/errata/RHSA-2026:65887, https://access.redhat.com/security/cve/CVE-2026-19546, https://bugzilla.redhat.com/2513963, https://errata.almalinux.org/10/ALSA-2026-65887.html

    Affected packages

    Package

    Name: perl-DBI

    Purl: pkg:rpm/almalinux/perl-DBI

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1.643-26.el10_2.4

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    ALSA-2026:65887 | CVE-DB