Bug#1149042: libdbi-perl: CVE-2026-88815 CVE-2026-88816

[Salvatore Bonaccorso]

Source: libdbi-perl
Version: 1.653-1
Severity: important
Tags: security upstream
X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>

Hi,

The following vulnerabilities were published for libdbi-perl.

CVE-2026-88815[0]:
| Fix DBI::sql_type_cast on IV/NV


CVE-2026-88816[1]:
| Fix FetchHashKeyName   on IV/NV


If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-88815
    https://www.cve.org/CVERecord?id=CVE-2026-88815
    https://github.com/perl5-dbi/dbi/commit/e5ad87e5602da995d28b4d65df222368b58d6702
[1] https://security-tracker.debian.org/tracker/CVE-2026-88816
    https://www.cve.org/CVERecord?id=CVE-2026-88816
    https://github.com/perl5-dbi/dbi/commit/70962570212dc60a5428098cf2a0462ad5945851

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore