Ubuntu alert USN-8841-1 (libdbi-perl)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8841-1] Perl DBI module vulnerabilities
Date:
             
 
Wed, 30 Sep 2026 01:57:54 +0000
Message-ID:
             
 
<E1xBjZy-0000LQ-Id@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8841-1
September 29, 2026

libdbi-perl vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

Perl DBI module could be made to crash or run programs as your login if it
opened a specially crafted file.

Software Description:
- libdbi-perl: Perl Database Interface (DBI)

Details:

It was discovered that the Perl DBI module did not correctly handle
certain integer arithmetic operations. An attacker could possibly use
this issue to cause a denial of service or execute arbitrary code.
(CVE-2026-73193, CVE-2026-73194)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libdbi-perl                     1.647-1ubuntu0.26.04.3

Ubuntu 24.04 LTS
  libdbi-perl                     1.643-4ubuntu0.3

Ubuntu 22.04 LTS
  libdbi-perl                     1.643-3ubuntu0.3

Ubuntu 20.04 LTS
  libdbi-perl                     1.643-1ubuntu0.1+esm3
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  libdbi-perl                     1.640-1ubuntu0.3+esm3
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  libdbi-perl                     1.634-1ubuntu0.2+esm4
                                  Available with Ubuntu Pro

Ubuntu 14.04 LTS
  libdbi-perl                     1.630-1ubuntu0.1~esm8
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8841-1
  CVE-2026-73193, CVE-2026-73194

Package Information:
  https://launchpad.net/ubuntu/+source/libdbi-perl/1.647-1u...
  https://launchpad.net/ubuntu/+source/libdbi-perl/1.643-4u...
  https://launchpad.net/ubuntu/+source/libdbi-perl/1.643-3u...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=lrr+
-----END PGP SIGNATURE-----