openSUSE perl-DBI Important Exec Risk Vulnerabilities Advisory 2026-3415

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

This update for perl-DBI fixes the following issues

* CVE-2026-14380: unvalidated string eval interpolation of the Profile package

name can lead to arbitrary Perl code execution (bsc#1271018).

* CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL

line can lead to a process crash (bsc#1271017).

* CVE-2026-15043: incorrect predicate evaluation in `DBI:SQL:Nano` can lead to

bypass of file-backed filters (bsc#1271399).

* CVE-2026-15392: missing checks to ensure the table file is not a symlink to

an untrusted location in `DBD::File` allows for arbitrary file reads and

writes (bsc#1271629).

* CVE-2026-60081: no limiting of the path index in profile parser of

`DBI:ProfileData` can enable small-file memory-amplification DoS

* CVE-2026-60082: out-of-bounds access in `_set_fbav` when a statement handle

has zero fields but a non-empty row can lead to a process crash

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* Basesystem Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-3415=1

zypper in -t patch SUSE-2026-3415=1

* SUSE Linux Enterprise Server 15 SP6 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3415=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3415=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)

* perl-DBI-1.647.0-150600.12.18.1

* perl-DBI-debugsource-1.647.0-150600.12.18.1

* perl-DBI-debuginfo-1.647.0-150600.12.18.1

* SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)

* perl-DBI-1.647.0-150600.12.18.1

* perl-DBI-debugsource-1.647.0-150600.12.18.1

* perl-DBI-debuginfo-1.647.0-150600.12.18.1

* openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64)

* perl-DBI-1.647.0-150600.12.18.1

* perl-DBI-debugsource-1.647.0-150600.12.18.1

* perl-DBI-debuginfo-1.647.0-150600.12.18.1

* Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64)

* perl-DBI-1.647.0-150600.12.18.1

* perl-DBI-debugsource-1.647.0-150600.12.18.1

* perl-DBI-debuginfo-1.647.0-150600.12.18.1

*

*

*

*

*

*

*

*

*

*

*

*

Get the latest Linux and open source security news straight to your inbox.