Your message dated Sat, 15 Aug 2026 15:35:49 +0000
with message-id <[email protected]>
and subject line Bug#1144470: fixed in libdbi-perl 1.652-1
has caused the Debian Bug report #1144470,
regarding libdbi-perl: CVE-2026-73193
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1144470: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1144470
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libdbi-perl
Version: 1.651-1
Severity: important
Tags: security upstream
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi,
The following vulnerability was published for libdbi-perl.
CVE-2026-73193[0]:
| DBI versions before 1.652 for Perl allow a heap out-of-bounds write
| on 32-bit perl via an integer wraparound in the output buffer size
| computed by preparse. preparse reserves its output buffer with
| `newSV(strlen(statement) * 7 + 16)`, budgeting seven output bytes
| per input byte for the longest ':p99999' expansion. The product is
| computed in STRLEN, which is 32 bits wide on a 32-bit perl build, so
| a statement of 613,566,757 bytes multiplies to 4,294,967,299, wraps
| modulo 2^32 to 3, and reserves 19 bytes. The parser then copies the
| statement out through a raw pointer with no capacity check, writing
| the whole 585 MB input past the end of the allocation. The 99,999
| placeholder limit does not bound this path, which is reached by
| ordinary non-placeholder content. Any caller that passes an
| untrusted statement of that length to preparse on a 32-bit perl gets
| a heap out-of-bounds write of attacker controlled bytes. Builds with
| a 64-bit STRLEN are not affected, since the wrap there needs a
| statement of about 2.3 exabytes.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2026-73193
https://www.cve.org/CVERecord?id=CVE-2026-73193
[1] https://lists.security.metacpan.org/cve-announce/msg/42707360/
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: libdbi-perl
Source-Version: 1.652-1
Done: gregor herrmann <[email protected]>
We believe that the bug you reported is fixed in the latest version of
libdbi-perl, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
gregor herrmann <[email protected]> (supplier of updated libdbi-perl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 15 Aug 2026 17:13:20 +0200
Source: libdbi-perl
Architecture: source
Version: 1.652-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <[email protected]>
Changed-By: gregor herrmann <[email protected]>
Closes: 1144470 1144471
Changes:
libdbi-perl (1.652-1) unstable; urgency=medium
.
* Import upstream version 1.652.
+ Limit statements to 292 Mb in preparse (CVE-2026-73193)
(Closes: #1144470)
+ Force placeholder limit on :# and :p# too (CVE-2026-73194)
(Closes: #1144471)
* Install new SECURITY.md file.
* Refresh t__40profile.t__NTP.patch (offset).
Checksums-Sha1:
afe645f1ed2bd90bee84753dab018c1114bbec90 2458 libdbi-perl_1.652-1.dsc
5fc073e859390f07b06ddd0a26020ef52d02e78e 734177 libdbi-perl_1.652.orig.tar.gz
ab4329abcf3475c7051e89d9513f9c843a9be2e3 13600
libdbi-perl_1.652-1.debian.tar.xz
19296839b4b89f8029ed28ca43667832b55455fd 1370372 libdbi-perl_1.652-1.git.tar.xz
0a9450f83cc3fb6c050ffaa991190b2c00d78c18 17568
libdbi-perl_1.652-1_source.buildinfo
Checksums-Sha256:
294b298b89839fa1602b270ca3ee2f0e22201b2759cde1096d99982f4feb3ea3 2458
libdbi-perl_1.652-1.dsc
e7981833696d15414bb76c43817d48f9fc3879e1421433116374fbc63e8e78ad 734177
libdbi-perl_1.652.orig.tar.gz
5297bd51fe4c61444f3ef5218ac24498e89b9be7f759d933282fb404f4835319 13600
libdbi-perl_1.652-1.debian.tar.xz
916aaffd282bd4b7bc77afbcee89bec9424bed4fe905084af7f5d171f1ade1e6 1370372
libdbi-perl_1.652-1.git.tar.xz
4753c62af9c98800fe309003326a0c690cdf58812c97046713dd049feb04b169 17568
libdbi-perl_1.652-1_source.buildinfo
Files:
b7e9b0cc06ca6c002adf34437b1f56e2 2458 perl optional libdbi-perl_1.652-1.dsc
0d511887cb8b8d2a86c5ef78395b0438 734177 perl optional
libdbi-perl_1.652.orig.tar.gz
664c8d75ce2d77abbb5187f9690a08f7 13600 perl optional
libdbi-perl_1.652-1.debian.tar.xz
bcfdd2094afa2fe67dc5720e50561da2 1370372 perl None
libdbi-perl_1.652-1.git.tar.xz
0d7ddcee6267bfaf2a305e67272c973b 17568 perl optional
libdbi-perl_1.652-1_source.buildinfo
Git-Tag-Info: tag=f7c427d0b058284f51bf3866709ca4c443188e0c
fp=d1e1316e93a760a8104d85fabb3a68018649aa06
Git-Tag-Tagger: gregor herrmann <[email protected]>
-----BEGIN PGP SIGNATURE-----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=iq2b
-----END PGP SIGNATURE-----
pgpUgBstFULK4.pgp
Description: PGP signature
--- End Message ---
