Red Hat Product Errata RHSA-2026:38901 - Security Advisory Issued: 2026-07-13 Updated: 2026-07-13 RHSA-2026:38901 - Security Advisory Overview Updated Packages Synopsis Important: perl-DBI:1.641 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the perl-DBI:1.641 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fix(es): DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2486734 - CVE-2026-9698 DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution CVEs CVE-2026-9698 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM perl-DBI-1.641-5.module+el8.10.0+24438+96f61291.src.rpm SHA-256: 2949fede7c40867db1e1c344a27d65a10f68ec19dd2ee62e3ac8348b2269835a perl-DBI-1.641-5.module+el8.10.0+24438+dc2220dd.src.rpm SHA-256: 1cf18d21c3be688839ca960c19177d055ea7c9b0a989f74a128fc430a038f32c x86_64 perl-DBI-1.641-5.module+el8.10.0+24438+96f61291.x86_64.rpm SHA-256: f50ccceff01f7250f79c6f85a37e2268e540c283ec16a8b353a8b6b7e809d90b perl-DBI-debuginfo-1.641-5.module+el8.10.0+24438+96f61291.x86_64.rpm SHA-256: 1fb51a805f6f068aefc9d730dfc492b2c6feb5820018743ca58ca484b53af95f perl-DBI-debugsource-1.641-5.module+el8.10.0+24438+96f61291.x86_64.rpm SHA-256: 398b9b0fc9ab5d5afdd345b01fc98cb1383f5f1ec3ed933d80ae9cd7245e1684 perl-DBI-1.641-5.module+el8.10.0+24438+dc2220dd.x86_64.rpm SHA-256: 97fa0b341783431afae6da911fb407b27757834fb011e599b4fa8e423f789de1 perl-DBI-debuginfo-1.641-5.module+el8.10.0+24438+dc2220dd.x86_64.rpm SHA-256: 2d83f6fe4f8f9759398a2e3f4a0de3c3eb5ed41db9235ba833a5956ebe628e45 perl-DBI-debugsource-1.641-5.module+el8.10.0+24438+dc2220dd.x86_64.rpm SHA-256: 6777eec82ea3516369d7a505b08395c237cea44017b1f2b9723acddf064c510e Red Hat Enterprise Linux for IBM z Systems 8 SRPM perl-DBI-1.641-5.module+el8.10.0+24438+96f61291.src.rpm SHA-256: 2949fede7c40867db1e1c344a27d65a10f68ec19dd2ee62e3ac8348b2269835a perl-DBI-1.641-5.module+el8.10.0+24438+dc2220dd.src.rpm SHA-256: 1cf18d21c3be688839ca960c19177d055ea7c9b0a989f74a128fc430a038f32c s390x perl-DBI-1.641-5.module+el8.10.0+24438+96f61291.s390x.rpm SHA-256: 08b8cc8a2e65db3cb78f4c836ee696f896f6a06b8497d538d1fd3c9374fd2e40 perl-DBI-debuginfo-1.641-5.module+el8.10.0+24438+96f61291.s390x.rpm SHA-256: 3dbe95d41c4efe930b91b372402bc4a2fe85186e88865bda60c5683cb9e6a29b perl-DBI-debugsource-1.641-5.module+el8.10.0+24438+96f61291.s390x.rpm SHA-256: efb4ff55fa5197c8d1c9dfe7f6a074b88d83b3233d9dc982e961b7678071d8da perl-DBI-1.641-5.module+el8.10.0+24438+dc2220dd.s390x.rpm SHA-256: 434f8ba62971d8bdb864fb0f8b92cd01d633417e361a1abaa9ca1008f1f204bf perl-DBI-debuginfo-1.641-5.module+el8.10.0+24438+dc2220dd.s390x.rpm SHA-256: efcb7518d0ce68c971d8fb6653d07d57807337779c49583639a254a32f99338b perl-DBI-debugsource-1.641-5.module+el8.10.0+24438+dc2220dd.s390x.rpm SHA-256: 7b210105fbc74111a5cd9072868cd6bca919121b0b6581cd3effe5d89c80e0cf Red Hat Enterprise Linux for Power, little endian 8 SRPM perl-DBI-1.641-5.module+el8.10.0+24438+96f61291.src.rpm SHA-256: 2949fede7c40867db1e1c344a27d65a10f68ec19dd2ee62e3ac8348b2269835a perl-DBI-1.641-5.module+el8.10.0+24438+dc2220dd.src.rpm SHA-256: 1cf18d21c3be688839ca960c19177d055ea7c9b0a989f74a128fc430a038f32c ppc64le perl-DBI-1.641-5.module+el8.10.0+24438+96f61291.ppc64le.rpm SHA-256: 4bb5fabb47d1d43b95593f37190129b9f0c57eeb3cc7a14a0006885d4df3dc7e perl-DBI-debuginfo-1.641-5.module+el8.10.0+24438+96f61291.ppc64le.rpm SHA-256: f21329e4e52a4cb09e25bff0dc6e8960c414a8c2e25582fe0f4a4a1265c3298b perl-DBI-debugsource-1.641-5.module+el8.10.0+24438+96f61291.ppc64le.rpm SHA-256: d76fcb36323bfe3aa69f5803d7ab5eba71a4ecec05701b085cb0553225c48cfb perl-DBI-1.641-5.module+el8.10.0+24438+dc2220dd.ppc64le.rpm SHA-256: 2cf82c05410b73e38ee720cea2b527f86a7ff693e6e9e7216113db217cb908c3 perl-DBI-debuginfo-1.641-5.module+el8.10.0+24438+dc2220dd.ppc64le.rpm SHA-256: 3e50b81c0c3621346074a8d54de4274d3407541e3424c8fc0a9b0630eaf776b3 perl-DBI-debugsource-1.641-5.module+el8.10.0+24438+dc2220dd.ppc64le.rpm SHA-256: d53274ab66d0d3f508698835ee4cd7c020718e7f0e5ad3a1763417a6af9560cd Red Hat Enterprise Linux for ARM 64 8 SRPM perl-DBI-1.641-5.module+el8.10.0+24438+96f61291.src.rpm SHA-256: 2949fede7c40867db1e1c344a27d65a10f68ec19dd2ee62e3ac8348b2269835a perl-DBI-1.641-5.module+el8.10.0+24438+dc2220dd.src.rpm SHA-256: 1cf18d21c3be688839ca960c19177d055ea7c9b0a989f74a128fc430a038f32c aarch64 perl-DBI-1.641-5.module+el8.10.0+24438+96f61291.aarch64.rpm SHA-256: af329dd6a4c107ba62515feb45d29b8bb47dce2ec5ee0764a5095865f828585e perl-DBI-debuginfo-1.641-5.module+el8.10.0+24438+96f61291.aarch64.rpm SHA-256: 9a3768d40bd036f7655fd3c92d3eeeb8ff8f257f15c3cc92dbe85c696e9cef4c perl-DBI-debugsource-1.641-5.module+el8.10.0+24438+96f61291.aarch64.rpm SHA-256: 9f22b650f28e6724b146dfe91d0eaf7c6a21f9e7bef5831bb521f116347faca2 perl-DBI-1.641-5.module+el8.10.0+24438+dc2220dd.aarch64.rpm SHA-256: 0857c7f0766397d65505c54a59379a6816dd8a3b91f85d434d0d2352e284904e perl-DBI-debuginfo-1.641-5.module+el8.10.0+24438+dc2220dd.aarch64.rpm SHA-256: 80771ed41a3fb701889d5fb7265f3106c21f8ec85f6069789c60accb7e55a840 perl-DBI-debugsource-1.641-5.module+el8.10.0+24438+dc2220dd.aarch64.rpm SHA-256: 596e9a8a2c5f8548f3feadbcb10eda50d135a168cbaee862b1694f2afb38d8c5 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM perl-DBI-1.641-5.module+el8.10.0+24438+96f61291.src.rpm SHA-256: 2949fede7c40867db1e1c344a27d65a10f68ec19dd2ee62e3ac8348b2269835a perl-DBI-1.641-5.module+el8.10.0+24438+dc2220dd.src.rpm SHA-256: 1cf18d21c3be688839ca960c19177d055ea7c9b0a989f74a128fc430a038f32c x86_64 perl-DBI-1.641-5.module+el8.10.0+24438+96f61291.x86_64.rpm SHA-256: f50ccceff01f7250f79c6f85a37e2268e540c283ec16a8b353a8b6b7e809d90b perl-DBI-debuginfo-1.641-5.module+el8.10.0+24438+96f61291.x86_64.rpm SHA-256: 1fb51a805f6f068aefc9d730dfc492b2c6feb5820018743ca58ca484b53af95f perl-DBI-debugsource-1.641-5.module+el8.10.0+24438+96f61291.x86_64.rpm SHA-256: 398b9b0fc9ab5d5afdd345b01fc98cb1383f5f1ec3ed933d80ae9cd7245e1684 perl-DBI-1.641-5.module+el8.10.0+24438+dc2220dd.x86_64.rpm SHA-256: 97fa0b341783431afae6da911fb407b27757834fb011e599b4fa8e423f789de1 perl-DBI-debuginfo-1.641-5.module+el8.10.0+24438+dc2220dd.x86_64.rpm SHA-256: 2d83f6fe4f8f9759398a2e3f4a0de3c3eb5ed41db9235ba833a5956ebe628e45 perl-DBI-debugsource-1.641-5.module+el8.10.0+24438+dc2220dd.x86_64.rpm SHA-256: 6777eec82ea3516369d7a505b08395c237cea44017b1f2b9723acddf064c510e Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM perl-DBI-1.641-5.module+el8.10.0+24438+96f61291.src.rpm SHA-256: 2949fede7c40867db1e1c344a27d65a10f68ec19dd2ee62e3ac8348b2269835a perl-DBI-1.641-5.module+el8.10.0+24438+dc2220dd.src.rpm SHA-256: 1cf18d21c3be688839ca960c19177d055ea7c9b0a989f74a128fc430a038f32c aarch64 perl-DBI-1.641-5.module+el8.10.0+24438+96f61291.aarch64.rpm SHA-256: af329dd6a4c107ba62515feb45d29b8bb47dce2ec5ee0764a5095865f828585e perl-DBI-debuginfo-1.641-5.module+el8.10.0+24438+96f61291.aarch64.rpm SHA-256: 9a3768d40bd036f7655fd3c92d3eeeb8ff8f257f15c3cc92dbe85c696e9cef4c perl-DBI-debugsource-1.641-5.module+el8.10.0+24438+96f61291.aarch64.rpm SHA-256: 9f22b650f28e6724b146dfe91d0eaf7c6a21f9e7bef5831bb521f116347faca2 perl-DBI-1.641-5.module+el8.10.0+24438+dc2220dd.aarch64.rpm SHA-256: 0857c7f0766397d65505c54a59379a6816dd8a3b91f85d434d0d2352e284904e perl-DBI-debuginfo-1.641-5.module+el8.10.0+24438+dc2220dd.aarch64.rpm SHA-256: 80771ed41a3fb701889d5fb7265f3106c21f8ec85f6069789c60accb7e55a840 perl-DBI-debugsource-1.641-5.module+el8.10.0+24438+dc2220dd.aarch64.rpm SHA-256: 596e9a8a2c5f8548f3feadbcb10eda50d135a168cbaee862b1694f2afb38d8c5 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 SRPM perl-DBI-1.641-5.module+el8.10.0+24438+96f61291.src.rpm SHA-256: 2949fede7c40867db1e1c344a27d65a10f68ec19dd2ee62e3ac8348b2269835a perl-DBI-1.641-5.module+el8.10.0+24438+dc2220dd.src.rpm SHA-256: 1cf18d21c3be688839ca960c19177d055ea7c9b0a989f74a128fc430a038f32c ppc64le perl-DBI-1.641-5.module+el8.10.0+24438+96f61291.ppc64le.rpm SHA-256: 4bb5fabb47d1d43b95593f37190129b9f0c57eeb3cc7a14a0006885d4df3dc7e perl-DBI-debuginfo-1.641-5.module+el8.10.0+24438+96f61291.ppc64le.rpm SHA-256: f21329e4e52a4cb09e25bff0dc6e8960c414a8c2e25582fe0f4a4a1265c3298b perl-DBI-debugsource-1.641-5.module+el8.10.0+24438+96f61291.ppc64le.rpm SHA-256
A critical buffer overflow vulnerability (CVE-2026-9698, CVSS 9.8) in the Perl DBI module's error handling can lead to arbitrary code execution. The vulnerability affects all versions of perl-DBI prior to version 1.648. A security update is available for Red Hat Enterprise Linux 8 systems, and users must upgrade to perl-DBI version 1.648 to remediate the issue.