SUSE-SU-2026:4612

Type: Security

Severity: Important

Published: 2026-10-09

SUSE Linux Enterprise Server 15 SP5

This update for perl-DBI fixes the following issues: - CVE-2026-78030: arbitrary modules loaded due to unvalidated `dbm_type` and `dbm_mldbm` attributes in `DBD::DBM` (bsc#1281704). - CVE-2026-88815: numeric value incorrectly treated as strings in `sql_type_cast_svpv` allows for process crash (bsc#1283055). - CVE-2026-88816: numeric value incorrectly treated as strings in `FetchHashKeyName` allows for process crash (bsc#1283056).

Evidence and freshness

Data current

Last supporting evidence check: 2026-10-24T12:39:05.241Z UTC

Official vendor advisory

SUSE Linux Enterprise Server 15 SP5

View source

Observed 2026-10-24T12:39:05.241Z UTC. Last updated 2026-10-10T06:01:49.628Z UTC.

Upstream Advisory

View official advisory

Affected Packages

perl-DBI 1.642-0

Interested in being alerted when there are new versions of perl-DBI? Set up an alert.