[From nobody Wed Jul 8 18:07:06 2026 Received: (at 1141667-close) by bugs.debian.org; 8 Jul 2026 17:05:36 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-104.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, BODY_RFQ,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=no autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 107; hammy, 150; neutral, 148; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:50200) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1whViK-00E0kG-0D for 1141667-close@bugs.debian.org; Wed, 08 Jul 2026 17:05:36 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1whViI-004HgI-10 for 1141667-close@bugs.debian.org; Wed, 08 Jul 2026 17:05:34 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=5fYT+G+AbsGAaGkTekcy/oVZvSo7FbT51f3CWzxur3c=; b=Dyodspsb4ZdFZZn1/2w74nF5ME fqw0tqACyU4n4/9DrZ9SumGw2ZcnRmpsYz55iLglOVlnK9vnyrqS2turX4JiDb3/eRjOYTcR5Z5fT Oiz6eR5XrjhTn0NT5ZIIA0M7KRtDUW2iZJut9BaLNNFXyq/BKErhaabo+WJJ5nhquJvs1SIJRjlNl 9TFHsDueZC2y9ggw91zs9YD00ish4XIcOC/JBeyviTfejNFG1JHYX/9Qq39xItaW9f0Do3IFlys60 YHQaadYOgJ1F0JIB16P69tjNLpihCgjUK812RUvpMYkbHaA91QrE96GeB4b4Dj5ooULq+6p1zVS1o plZj8pEg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1whViH-0000000B6XE-3Rjq; Wed, 08 Jul 2026 17:05:33 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1141667-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libdbi-perl Debian: DAK Debian-Changes: libdbi-perl_1.650-1_source.changes Debian-Source: libdbi-perl Debian-Version: 1.650-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1141667: fixed in libdbi-perl 1.650-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============5027877381257138542==" Message-Id: <E1whViH-0000000B6XE-3Rjq@fasolo.debian.org> Date: Wed, 08 Jul 2026 17:05:33 +0000 --===============5027877381257138542== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libdbi-perl Source-Version: 1.650-1 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of libdbi-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1141667@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated libdbi-perl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 08 Jul 2026 18:31:30 +0200 Source: libdbi-perl Architecture: source Version: 1.650-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1141667 Changes: libdbi-perl (1.650-1) unstable; urgency=3Dmedium . * Import upstream version 1.650. - Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739) - Fix out-of-bounds read in preparse of SQL that starts with a comment (CVE-2026-14740) - Fix code injection via Profile DSN attribute or DBI_PROFILE variable (CVE-2026-14380) Closes: #1141667 * Install new upstream document. Checksums-Sha1: fe3d5b723b20d6baadb620271e1dc010b252ed2c 2433 libdbi-perl_1.650-1.dsc 63eda1d88d42ca6b3e1c5afec157c905c20c40d1 731654 libdbi-perl_1.650.orig.tar.gz a4987decdf8ee8e01e4eae8fbf2be56ec62d1311 13344 libdbi-perl_1.650-1.debian.ta= r.xz Checksums-Sha256: d8267d5983ebbf8c2c3d961aa257e9a6500e110569deebd8c604902af3adf4c2 2433 libdbi= -perl_1.650-1.dsc a807b817c1cfb0fe6ecccff1d9ddeb293c317d518f5ab2007dfb9d3bccdbcf83 731654 libd= bi-perl_1.650.orig.tar.gz 23b7465d79d2fb414749399b04ceb7df33e92a518b5d00a7e07b34ae9073b60f 13344 libdb= i-perl_1.650-1.debian.tar.xz Files: c550ae1ce69a05b8d931891d26f3b203 2433 perl optional libdbi-perl_1.650-1.dsc 1060f40a61392a8d6989cf76509289b7 731654 perl optional libdbi-perl_1.650.orig= .tar.gz 14c7a5b46ee2070cf2608ee874a45688 13344 perl optional libdbi-perl_1.650-1.deb= ian.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmpOfFFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgYngg/7Bv/RwYXIZv6LNR/+jRIsn6fGrXqd2IX4ITti+uh8UdbkYmb00/F5BLVD +JDztRfQwqRD9BseeSYsU3n5K99Rs8b9VrT+xZkDEQ22/W89z07PAfcqJynXRvrc qfZH7b9ZWu2B9OBElrEnnEUKitKV5WSAPz1zErp64aOKzLwRx4Whu8vnzMRzHCi1 qQGIn4Inlb/GvQHciBQTC2kQaggREvKHpyF9kzYFfcV3XNvKdOj1oYvsRTdiQ8AV TAKCFpwzelLeFwRzowvPH2G9DKHbBYBcs+o+6VAb2LGe1pJuVDQpo+Tn7e/aEJB7 QZDQ+rBPsnQo9WwrIwBTXozAXPhaLCWRE/5rq+yNfsewgg0nQi1SUxh8Hp2IDAMU POCw7PcAmDScrNwMuW0Ds99zSsjeCx5Z9r7qBgvPXMlxw9EkUG6vQZo3gBoBKj9u 0luN/dP9+2EOSSTpT660W2ZEB4+bQz6a8o8OQBRvz/FXWRgWWnW1wd9qsL8VFKxV UaimYB0uXDu7LJv86B3zytOR+mOkpoDBH617IqBQDvNaHNr2mRHO+v3LFbr5MYgH 4qLF5fzU/AJW3YZDRH1cIu1drUebeNEi7uW4J6dTqjK42Im1C5nB8r4eKzHrucUx T8op993EgcZKAy2VsF5jU8izrTO10bLucEv2jdj/RS7fh/LxXW0=3D =3DzY4d -----END PGP SIGNATURE----- --===============5027877381257138542== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCak6DXQAKCRCb9qggYcy5 IVT9AP4g5+r3QPK2rYEZO5Nve4xd0FqPsvFgrau81F8NZl9SagD/aYRUSV5pVVKI SPVcIfY+jq2pedO06m0DkXYP1vtHJws= =ReCZ -----END PGP SIGNATURE----- --===============5027877381257138542==-- ]