Debian alert DSA-6473-1 (libdbi-perl)

From:
             
 
Salvatore Bonaccorso <carnil@debian.org>
To:
             
 
debian-security-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DSA 6473-1] libdbi-perl security update
Date:
             
 
Thu, 27 Aug 2026 09:34:32 +0000
Message-ID:
             
 
<E1wzWVE-00000002a92-3UZw@seger.debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6473-1                   security@debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
August 27, 2026                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : libdbi-perl
CVE ID         : CVE-2026-14380 CVE-2026-14739 CVE-2026-14740 CVE-2026-15043
                 CVE-2026-15392 CVE-2026-60081 CVE-2026-60082 CVE-2026-73193
                 CVE-2026-73194
Debian Bug     : 1141667 1142072 1144470 1144471 1144851

Several vulnerabilities were discovered in libdbi-perl, a Perl framework
that provides a common interface to access various backend databases in
a uniform manner, which could result in denial of service, path
traversal, bypass of file-backed filters or the execution of arbitrary
code.

For the stable distribution (trixie), these problems have been fixed in
version 1.652-2~deb13u1.

We recommend that you upgrade your libdbi-perl packages.

For the detailed security status of libdbi-perl please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/libdbi-perl

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=toy9
-----END PGP SIGNATURE-----