Search

Find a vulnerability

Search criteria

    1 vulnerability found for libdbi-perl security update by unknown

    GCVE-1988-2026-0523

    Vulnerability from gna-1988 – Published: 2026-11-02 09:47 – Updated: 2026-11-02 09:47
    VLAI
    Title
    [Bugtraq] [SECURITY] [DSA 6473-1] libdbi-perl security update
    Summary
    -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6473-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso August 27, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : libdbi-perl CVE ID : CVE-2026-14380 CVE-2026-14739 CVE-2026-14740 CVE-2026-15043 CVE-2026-15392 CVE-2026-60081 CVE-2026-60082 CVE-2026-73193 CVE-2026-73194 Debian Bug : 1141667 1142072 1144470 1144471 1144851 Several vulnerabilities were discovered in libdbi-perl, a Perl framework that provides a common interface to access various backend databases in a uniform manner, which could result in denial of service, path traversal, bypass of file-backed filters or the execution of arbitrary code. For the stable distribution (trixie), these problems have been fixed in version 1.652-2~deb13u1. We recommend that you upgrade your libdbi-perl packages. For the detailed security status of libdbi-perl please refer to its security tracker page at: https://security-tracker.debian.org/tracker/libdbi-perl Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmqQA7BfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0QONQ//cFlJ4JxgrRTu9OdbM63gSMoDCGRtBHaGmBhtdQagrZgrtv8VUWTgsZMP hpk2buvdBKuGRR90KXdEj0842VbE9L7a9Gc8bN5/HPXWmgpwmLUthqXId6qp3BGU FYYTv2V2WhMc/1kSfnSjNwsW6rEvNRR2EHuTMc8eDOyjUzKH0VgctNR8JH3f9WYU ZTlxuaFsIjkH10BgACEyOQNQs0yPL3K1jnz/Vtt5XckUzPgURFXIG55s/2sohd9z 8Nu6283ghyhiUX8Zf1dVggj39Zonpx6jWmUe892IDv7fby2t0hcX+hzVS3jy4Jf8 lsgEbFZXCynf/VTB+fsE8M16JyssKwUIOrl6LI2LWdHajViA9kjpZjfJIXFH/qQ6 s9AeRnsJ7DIMBFJqYO1NrHvOWtrZUqcYVlQFpPlvM8znvgI4Tt330WlzpvKRpyxo SoYUbM/fZs5sIKQhCnOy4LpSZ3Mx+hWj6TXI6QxSUu52xtp4hdFjjml5y90klYVv 4dXwBIU2jv2v7QtVUc4F28vf4qF2M6cjXtd5E656jUpqDR5qobMfBEkd+4biAxYp 9cSPW+c/ngzPc0bjpX92JWuJjhL3yS9FIjXpIoD++6evbXmBRGpsL7wwoB+1/8ga uSsdP71uftL13m0mkLIMEOcsZoSD5b3pQdpignZrH0+RvK5GCVA= =toy9 -----END PGP SIGNATURE-----
    Severity
    No CVSS data available.
    Assigner
    VULNARCHIVE GNA GNA-1988
    GNA scorecard E 38/100 over 556 records in the last 180 days details
    Impacted products
    Relationships
    reference GCVE-1988-2026-0523 (this record)

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "product": "libdbi-perl security update",
              "vendor": "unknown",
              "versions": [
                {
                  "status": "affected",
                  "version": "unknown"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Salvatore Bonaccorso"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n- -------------------------------------------------------------------------\nDebian Security Advisory DSA-6473-1                   security@debian.org\nhttps://www.debian.org/security/                     Salvatore Bonaccorso\nAugust 27, 2026                       https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\nPackage        : libdbi-perl\nCVE ID         : CVE-2026-14380 CVE-2026-14739 CVE-2026-14740 CVE-2026-15043\nCVE-2026-15392 CVE-2026-60081 CVE-2026-60082 CVE-2026-73193\nCVE-2026-73194\nDebian Bug     : 1141667 1142072 1144470 1144471 1144851\nSeveral vulnerabilities were discovered in libdbi-perl, a Perl framework\nthat provides a common interface to access various backend databases in\na uniform manner, which could result in denial of service, path\ntraversal, bypass of file-backed filters or the execution of arbitrary\ncode.\nFor the stable distribution (trixie), these problems have been fixed in\nversion 1.652-2~deb13u1.\nWe recommend that you upgrade your libdbi-perl packages.\nFor the detailed security status of libdbi-perl please refer to its\nsecurity tracker page at:\nhttps://security-tracker.debian.org/tracker/libdbi-perl\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----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\nuSsdP71uftL13m0mkLIMEOcsZoSD5b3pQdpignZrH0+RvK5GCVA=\n=toy9\n-----END PGP SIGNATURE-----"
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-11-02T09:47:19Z",
            "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
            "shortName": "VULNARCHIVE"
          },
          "references": [
            {
              "tags": [
                "technical-description"
              ],
              "url": "https://vuln.freearchive.org/archive/item/8d3debe3a20d9b3487ca95858c8891302eafa2bae23ceff70ab2d55889e31829"
            },
            {
              "tags": [
                "technical-description"
              ],
              "url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/45THFCFAWX4EDN67UTPSO7EMHRQ7RSWF/"
            },
            {
              "url": "https://security-tracker.debian.org/tracker/libdbi-perl"
            },
            {
              "url": "https://www.debian.org/security/"
            },
            {
              "url": "https://www.debian.org/security/faq"
            }
          ],
          "source": {
            "defect": [
              "E1wzWVE-00000002a92-3UZw%40seger.debian.org"
            ],
            "discovery": "EXTERNAL"
          },
          "title": "[Bugtraq] [SECURITY] [DSA 6473-1] libdbi-perl security update",
          "x_gcve": [
            {
              "recordType": "reference",
              "relationships": [
                {
                  "destId": "CVE-2026-14380",
                  "type": "related"
                },
                {
                  "destId": "CVE-2026-14739",
                  "type": "related"
                },
                {
                  "destId": "CVE-2026-14740",
                  "type": "related"
                },
                {
                  "destId": "CVE-2026-15043",
                  "type": "related"
                },
                {
                  "destId": "CVE-2026-15392",
                  "type": "related"
                },
                {
                  "destId": "CVE-2026-60081",
                  "type": "related"
                },
                {
                  "destId": "CVE-2026-60082",
                  "type": "related"
                },
                {
                  "destId": "CVE-2026-73193",
                  "type": "related"
                },
                {
                  "destId": "CVE-2026-73194",
                  "type": "related"
                }
              ],
              "vulnId": "GCVE-1988-2026-0523",
              "x_vulnarchive": {
                "archiveUrl": "https://vuln.freearchive.org/archive/item/8d3debe3a20d9b3487ca95858c8891302eafa2bae23ceff70ab2d55889e31829",
                "automated": true,
                "contentSha256": "8d3debe3a20d9b3487ca95858c8891302eafa2bae23ceff70ab2d55889e31829",
                "evidenceScore": 6,
                "messageId": "E1wzWVE-00000002a92-3UZw%40seger.debian.org",
                "originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/45THFCFAWX4EDN67UTPSO7EMHRQ7RSWF/",
                "policy": "vulnarchive-1",
                "sourceFormat": "text/html",
                "sourcePublishedAt": "2026-11-02T09:47:19Z"
              }
            },
            {
              "recordType": "advisory",
              "vulnId": "gcve-1988-2026-0523"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "assignerShortName": "VULNARCHIVE",
        "datePublished": "2026-11-02T09:47:19Z",
        "dateUpdated": "2026-11-02T09:47:19Z",
        "state": "PUBLISHED",
        "vulnId": "GCVE-1988-2026-0523"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }