Red Hat Security Advisory: perl-DBI security update

The perl-DBI package, which provides a database-independent interface module for Perl, contains a vulnerability (CVE-2026-88815) that can cause a denial of service through an invalid memory read triggered during numeric type casting. Red Hat has released a security update (perl-DBI-1.641-4.el8_10) for Red Hat Enterprise Linux 8 on multiple architectures to fix this issue. The advisory classifies the impact as important and recommends applying the update as detailed in Red Hat's official errata RHSA-2026:77576.

This vulnerability allows an attacker to cause a denial of service condition by triggering an invalid memory read in the perl-DBI module during numeric type casting operations. This can disrupt normal database interface operations in Perl applications relying on this module. There is no indication of code execution or data corruption beyond denial of service. No known exploits in the wild have been reported.

Red Hat has released an official security update that fixes this vulnerability. Users should apply the perl-DBI update version 1.641-4.el8_10 or later for Red Hat Enterprise Linux 8 as provided in the Red Hat advisory RHSA-2026:77576. Detailed update instructions are available at https://access.redhat.com/articles/11258. Applying this update fully mitigates the vulnerability.