An update for perl-DBI is now available for openEuler-20.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-3478 Final 1.0 1.0 2026-08-20 Initial 2026-08-20 2026-08-20 openEuler SA Tool V1.0 2026-08-20 perl-DBI security update An update for perl-DBI is now available for openEuler-20.03-LTS-SP4 The DBI is the standard database interface module for Perl. It defines a set of methods, variables and conventions that provide a consistent database interface independent of the actual database being used. It is important to remember that the DBI is just an interface. The DBI is a layer of "glue" between an application and one or more database driver modules. It is the driver modules which do most of the real work. The DBI provides a standard interface and framework for the drivers to operate within. Security Fix(es): DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' branch parses the number with `atoi(src)` and assigns it to the binder counter with no range check, so a statement containing ':2147483648' leaves the counter negative (-2147483648 with glibc, where atoi wraps). Each following '?' then expands through `sprintf(start, ":p%d", idx++)` to ':p-2147483648', 14 bytes with the terminating NUL where the buffer budgets 7. The placeholder limit added in 1.650 tests the counter against 99,999, which a negative counter passes. Any caller that preparses an untrusted statement into ':pN' style placeholders gets a heap out-of-bounds write that grows with the number of '?' marks following the poisoned placeholder. The '?' and '%s' return styles compare the parsed number against the expected sequence and error out, and are unaffected.(CVE-2026-73194) An update for perl-DBI is now available for openEuler-20.03-LTS-SP4. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High perl-DBI https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3478 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-73194 https://nvd.nist.gov/vuln/detail/CVE-2026-73194 openEuler-20.03-LTS-SP4 perl-DBI-1.643-6.oe2003sp4.aarch64.rpm perl-DBI-debuginfo-1.643-6.oe2003sp4.aarch64.rpm perl-DBI-debugsource-1.643-6.oe2003sp4.aarch64.rpm perl-DBI-1.643-6.oe2003sp4.src.rpm perl-DBI-1.643-6.oe2003sp4.x86_64.rpm perl-DBI-debuginfo-1.643-6.oe2003sp4.x86_64.rpm perl-DBI-debugsource-1.643-6.oe2003sp4.x86_64.rpm perl-DBI-help-1.643-6.oe2003sp4.noarch.rpm DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' branch parses the number with `atoi(src)` and assigns it to the binder counter with no range check, so a statement containing ':2147483648' leaves the counter negative (-2147483648 with glibc, where atoi wraps). Each following '?' then expands through `sprintf(start, ":p%d", idx++)` to ':p-2147483648', 14 bytes with the terminating NUL where the buffer budgets 7. The placeholder limit added in 1.650 tests the counter against 99,999, which a negative counter passes. Any caller that preparses an untrusted statement into ':pN' style placeholders gets a heap out-of-bounds write that grows with the number of '?' marks following the poisoned placeholder. The '?' and '%s' return styles compare the parsed number against the expected sequence and error out, and are unaffected. 2026-08-20 CVE-2026-73194 openEuler-20.03-LTS-SP4 High 7.7 AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H perl-DBI security update 2026-08-20 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3478