Debian alert DLA-4764-2 (libdbd-csv-perl)

From:
             
 
Guilhem Moulin <guilhem@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4764-2] libdbd-csv-perl regression update
Date:
             
 
Mon, 31 Aug 2026 23:01:34 +0200
Message-ID:
             
 
<apXrkAcHEkrIO8SE@debian.org>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4764-2                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                       Guilhem Moulin
August 31, 2026                               https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : libdbd-csv-perl
Version        : 0.5800-1+deb11u1 0.6000-1+deb12u1
Debian Bug     : 1139509

The security fix for CVE-2026-15392 (symlink escape in DBD::File),
published for libdbi-perl as DLA-4764-1, broke the test suite of the
libdbd-csv-perl package.

For Debian 11 bullseye, this problem has been fixed in version
0.5800-1+deb11u1.

For Debian 12 bookworm, this problem has been fixed in version
0.6000-1+deb12u1.

We recommend that you upgrade your libdbd-csv-perl packages.

For the detailed security status of libdbd-csv-perl please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libdbd-csv-perl

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=EwUd
-----END PGP SIGNATURE-----