Red Hat Product Errata RHSA-2026:62667 - Security Advisory Issued: 2026-09-02 Updated: 2026-09-02 RHSA-2026:62667 - Security Advisory Overview Updated Packages Synopsis Important: perl-DBI security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for perl-DBI is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fix(es): perl-DBI: perl-DBI: Heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution. (CVE-2026-10879) DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698) DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute (CVE-2026-14380) DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Fixes BZ - 2485464 - CVE-2026-10879 perl-DBI: perl-DBI: Heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution. BZ - 2486734 - CVE-2026-9698 DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution BZ - 2497915 - CVE-2026-14380 DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute BZ - 2497916 - CVE-2026-14739 DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders CVEs CVE-2026-9698 CVE-2026-10879 CVE-2026-14380 CVE-2026-14739 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM perl-DBI-1.641-2.el8_10.src.rpm SHA-256: bee9663112ae4efaea4baa82f03089166e46e36799400ec19856a534e4b1ea6f x86_64 perl-DBI-1.641-2.el8_10.x86_64.rpm SHA-256: 0ffd160646feadb70b30372e98ba06cc414d01bad470a391ab18ead7bb4959a7 perl-DBI-debuginfo-1.641-2.el8_10.x86_64.rpm SHA-256: eb98228b48b546f87dc3f20880df1ec59c1d8ee9dd4adcf697622f526bff82a6 perl-DBI-debugsource-1.641-2.el8_10.x86_64.rpm SHA-256: 5ed291eca16c8b3770bddaf6cf9c17e359b5e5ce824d33f528653994f983d3e1 Red Hat Enterprise Linux for Power, little endian 8 SRPM perl-DBI-1.641-2.el8_10.src.rpm SHA-256: bee9663112ae4efaea4baa82f03089166e46e36799400ec19856a534e4b1ea6f ppc64le perl-DBI-1.641-2.el8_10.ppc64le.rpm SHA-256: 4103b620ddbe6aa77cc8c03adf9dd9221426df3734ec550ae94322401ba33e57 perl-DBI-debuginfo-1.641-2.el8_10.ppc64le.rpm SHA-256: 738ba36784f95e29cdd893c29aa1bb23f3bf671cd7e1afc99dc263bf5bbeb14c perl-DBI-debugsource-1.641-2.el8_10.ppc64le.rpm SHA-256: ce7efc3eba7699c1af61177dd6484b4d1f2e37c0c53cb07d8dbf8a733b2a9ee5 Red Hat Enterprise Linux for ARM 64 8 SRPM perl-DBI-1.641-2.el8_10.src.rpm SHA-256: bee9663112ae4efaea4baa82f03089166e46e36799400ec19856a534e4b1ea6f aarch64 perl-DBI-1.641-2.el8_10.aarch64.rpm SHA-256: f3b6e9d19572050b993e3d056540fd6424cb5f2b7aceb5e70b7b749d7f0a46aa perl-DBI-debuginfo-1.641-2.el8_10.aarch64.rpm SHA-256: d5842834d39322c4b69adc4e518d9d6bf9ba9f66f67f30b9c478c80b553cb732 perl-DBI-debugsource-1.641-2.el8_10.aarch64.rpm SHA-256: d5345ec754e05722b44f25a79c160da831e617ef633c218db43d613f7f4568bc Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM perl-DBI-1.641-2.el8_10.src.rpm SHA-256: bee9663112ae4efaea4baa82f03089166e46e36799400ec19856a534e4b1ea6f x86_64 perl-DBI-1.641-2.el8_10.x86_64.rpm SHA-256: 0ffd160646feadb70b30372e98ba06cc414d01bad470a391ab18ead7bb4959a7 perl-DBI-debuginfo-1.641-2.el8_10.x86_64.rpm SHA-256: eb98228b48b546f87dc3f20880df1ec59c1d8ee9dd4adcf697622f526bff82a6 perl-DBI-debugsource-1.641-2.el8_10.x86_64.rpm SHA-256: 5ed291eca16c8b3770bddaf6cf9c17e359b5e5ce824d33f528653994f983d3e1 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM perl-DBI-1.641-2.el8_10.src.rpm SHA-256: bee9663112ae4efaea4baa82f03089166e46e36799400ec19856a534e4b1ea6f aarch64 perl-DBI-1.641-2.el8_10.aarch64.rpm SHA-256: f3b6e9d19572050b993e3d056540fd6424cb5f2b7aceb5e70b7b749d7f0a46aa perl-DBI-debuginfo-1.641-2.el8_10.aarch64.rpm SHA-256: d5842834d39322c4b69adc4e518d9d6bf9ba9f66f67f30b9c478c80b553cb732 perl-DBI-debugsource-1.641-2.el8_10.aarch64.rpm SHA-256: d5345ec754e05722b44f25a79c160da831e617ef633c218db43d613f7f4568bc Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 SRPM perl-DBI-1.641-2.el8_10.src.rpm SHA-256: bee9663112ae4efaea4baa82f03089166e46e36799400ec19856a534e4b1ea6f ppc64le perl-DBI-1.641-2.el8_10.ppc64le.rpm SHA-256: 4103b620ddbe6aa77cc8c03adf9dd9221426df3734ec550ae94322401ba33e57 perl-DBI-debuginfo-1.641-2.el8_10.ppc64le.rpm SHA-256: 738ba36784f95e29cdd893c29aa1bb23f3bf671cd7e1afc99dc263bf5bbeb14c perl-DBI-debugsource-1.641-2.el8_10.ppc64le.rpm SHA-256: ce7efc3eba7699c1af61177dd6484b4d1f2e37c0c53cb07d8dbf8a733b2a9ee5 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .