Hi,

The following vulnerabilities were published for libdbi-perl.

CVE-2026-88815[0]:
| Fix DBI::sql_type_cast on IV/NV


CVE-2026-88816[1]:
| Fix FetchHashKeyName   on IV/NV


If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-88815
https://www.cve.org/CVERecord?id=CVE-2026-88815
https://github.com/perl5-dbi/dbi/commit/e5ad87e5602da995d28b4d65df222368b58d6702
[1] https://security-tracker.debian.org/tracker/CVE-2026-88816
https://www.cve.org/CVERecord?id=CVE-2026-88816
https://github.com/perl5-dbi/dbi/commit/70962570212dc60a5428098cf2a0462ad5945851

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

We believe that the bug you reported is fixed in the latest version of
libdbi-perl, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1149042@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
gregor herrmann <gregoa@debian.org> (supplier of updated libdbi-perl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 27 Sep 2026 17:43:29 +0200
Source: libdbi-perl
Architecture: source
Version: 1.654-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa@debian.org>
Closes: 1149042
Changes:
 libdbi-perl (1.654-1) unstable; urgency=medium
 .
   * Import upstream version 1.654.
     - Fix DBI::sql_type_cast on IV/NV (CVE-2026-88815)
     - Fix FetchHashKeyName   on IV/NV (CVE-2026-88816)
     Closes: #1149042
Checksums-Sha1:
 b08a3f343e9bc61812cc6cfdb596132c8a0e7d1b 2458 libdbi-perl_1.654-1.dsc
 feccbefb9387f18eefe8b5f72dcf5cc5d850be34 742647 libdbi-perl_1.654.orig.tar.gz
 ce70d322b172eaebd31f2288e7783e39512671c2 13808 libdbi-perl_1.654-1.debian.tar.xz
 9f31c749a3c36d09932e69e8faa0d947d4af233c 1199064 libdbi-perl_1.654-1.git.tar.xz
 5e7a051351c4a3c11497d7c068f2fd348f4bfeae 17740 libdbi-perl_1.654-1_source.buildinfo
Checksums-Sha256:
 f62d664b026bafe432525aafaa3791fa96f2a722cf4f0e27778635700f2ad3d7 2458 libdbi-perl_1.654-1.dsc
 da853ff382ae8000e967767ad4ed90c5dc73004858f6dec48fc6f4340c306922 742647 libdbi-perl_1.654.orig.tar.gz
 30a7b648befcfcb07495819e5612a8244ff5a0e5434f60b4986d049eb24a12eb 13808 libdbi-perl_1.654-1.debian.tar.xz
 69ee0afd4c9cb59c3fea314004614d362945ef6934b662ab0fb8d364f4e60657 1199064 libdbi-perl_1.654-1.git.tar.xz
 410e1686807465b667fab47a15add932b76925df8af4df5db1e21ac3fd0f3611 17740 libdbi-perl_1.654-1_source.buildinfo
Files:
 85614088c1851a8b5eebab9e4576dc9e 2458 perl optional libdbi-perl_1.654-1.dsc
 0b5ec200273a2e2d6c7163151eddf023 742647 perl optional libdbi-perl_1.654.orig.tar.gz
 303ccda76e12f820c5aabd3aafd4dc2b 13808 perl optional libdbi-perl_1.654-1.debian.tar.xz
 6cbe741e48e1b7e84fda97be96deaf79 1199064 perl None libdbi-perl_1.654-1.git.tar.xz
 08afad1bb6dc8715a16654e4609e305d 17740 perl optional libdbi-perl_1.654-1_source.buildinfo
Git-Tag-Info: tag=da06a49198b44d97db0cfca1de57a67de0d73bf4 fp=d1e1316e93a760a8104d85fabb3a68018649aa06
Git-Tag-Tagger: gregor herrmann <gregoa@debian.org>
-----BEGIN PGP SIGNATURE-----
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=Vfoo
-----END PGP SIGNATURE-----