SUSE-SU-2026:2749-1

Details

Description of the patch:

This update for perl-DBI fixes the following issues

CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer (bsc#1267957).
CVE-2026-10879: SQL statements with more than 9 binders can cause an heap overflow (bsc#1267849).

Affected Packages

perl-DBI

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Server 15 SP6SUSE Linux Enterprise Server 15 SP6-LTSS

Fixed in:

1.647.0-150600.12.11.1

References

ADVISORY

https://bugzilla.suse.com/1267849

ADVISORY

https://bugzilla.suse.com/1267957

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-July/047975.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-10879/

ADVISORY

https://www.suse.com/security/cve/CVE-2026-9698/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20262749-1/