SUSE-SU-2026:3461-1
Vulnerability from csaf_suse - Published: 2026-08-03 12:13 - Updated: 2026-09-17 16:37Summary
Security update for perl-DBI
Severity
Important
Notes
Title of the patch: Security update for perl-DBI
Description of the patch: This update for perl-DBI fixes the following issues:
- CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code
execution (bsc#1271018).
- CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a process crash
(bsc#1271017).
- CVE-2026-15043: incorrect predicate evaluation in `DBI:SQL:Nano` can lead to bypass of file-backed filters
(bsc#1271399).
- CVE-2026-15392: missing checks to ensure the table file is not a symlink to an untrusted location in `DBD::File`
allows for arbitrary file reads and writes (bsc#1271629).
- CVE-2026-60081: no limiting of the path index in profile parser of `DBI:ProfileData` can enable small-file
memory-amplification DoS (bsc#1271458).
- CVE-2026-60082: out-of-bounds access in `_set_fbav` when a statement handle has zero fields but a non-empty row
can lead to a process crash (bsc#1271459).
Changes for perl-DBI:
- missing method dependency in the path-containment guard can cause security check failures and functional regressions
when handling table symlinks (bsc#1271822).
Patchnames: SUSE-2026-3461,SUSE-SLE-SERVER-12-SP5-LTSS-2026-3461,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-3461
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.3 (High)
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
17 products, the same list as for
CVE-2026-14380
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
17 products, the same list as for
CVE-2026-14380
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
17 products, the same list as for
CVE-2026-14380
Threats
Impact
important
6.2 (Medium)
Affected products
Recommended
17 products, the same list as for
CVE-2026-14380
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
17 products, the same list as for
CVE-2026-14380
Threats
Impact
moderate
References
32 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for perl-DBI",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for perl-DBI fixes the following issues:\n\n- CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code\n execution (bsc#1271018).\n- CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a process crash\n (bsc#1271017).\n- CVE-2026-15043: incorrect predicate evaluation in `DBI:SQL:Nano` can lead to bypass of file-backed filters\n (bsc#1271399).\n- CVE-2026-15392: missing checks to ensure the table file is not a symlink to an untrusted location in `DBD::File`\n allows for arbitrary file reads and writes (bsc#1271629).\n- CVE-2026-60081: no limiting of the path index in profile parser of `DBI:ProfileData` can enable small-file\n memory-amplification DoS (bsc#1271458).\n- CVE-2026-60082: out-of-bounds access in `_set_fbav` when a statement handle has zero fields but a non-empty row\n can lead to a process crash (bsc#1271459).\n\nChanges for perl-DBI:\n\n- missing method dependency in the path-containment guard can cause security check failures and functional regressions\n when handling table symlinks (bsc#1271822).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-3461,SUSE-SLE-SERVER-12-SP5-LTSS-2026-3461,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-3461",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_3461-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:3461-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20263461-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:3461-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-August/049046.html"
},
{
"category": "self",
"summary": "SUSE Bug 1271017",
"url": "https://bugzilla.suse.com/1271017"
},
{
"category": "self",
"summary": "SUSE Bug 1271018",
"url": "https://bugzilla.suse.com/1271018"
},
{
"category": "self",
"summary": "SUSE Bug 1271399",
"url": "https://bugzilla.suse.com/1271399"
},
{
"category": "self",
"summary": "SUSE Bug 1271458",
"url": "https://bugzilla.suse.com/1271458"
},
{
"category": "self",
"summary": "SUSE Bug 1271459",
"url": "https://bugzilla.suse.com/1271459"
},
{
"category": "self",
"summary": "SUSE Bug 1271629",
"url": "https://bugzilla.suse.com/1271629"
},
{
"category": "self",
"summary": "SUSE Bug 1271822",
"url": "https://bugzilla.suse.com/1271822"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14380 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14380/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14740 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14740/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-15043 page",
"url": "https://www.suse.com/security/cve/CVE-2026-15043/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-15392 page",
"url": "https://www.suse.com/security/cve/CVE-2026-15392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-60081 page",
"url": "https://www.suse.com/security/cve/CVE-2026-60081/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-60082 page",
"url": "https://www.suse.com/security/cve/CVE-2026-60082/"
}
],
"title": "Security update for perl-DBI",
"tracking": {
"current_release_date": "2026-09-17T16:37:59Z",
"generator": {
"date": "2026-08-03T12:13:48Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:3461-1",
"initial_release_date": "2026-08-03T12:13:48Z",
"revision_history": [
{
"date": "2026-08-03T12:13:48Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T19:44:22Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T20:47:56Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-17T16:37:59Z",
"number": "4",
"summary": "unknown changes"
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "perl-DBI-0:1.628-5.21.1.aarch64",
"product": {
"name": "perl-DBI-0:1.628-5.21.1.aarch64",
"product_id": "perl-DBI-0:1.628-5.21.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:perl:database_interface:1.628:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/perl-DBI@1.628-5.21.1?arch=aarch64\u0026upstream=perl-DBI-0:1.628-5.21.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "perl-DBI-0:1.628-5.21.1.i586",
"product": {
"name": "perl-DBI-0:1.628-5.21.1.i586",
"product_id": "perl-DBI-0:1.628-5.21.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:perl:database_interface:1.628:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/perl-DBI@1.628-5.21.1?arch=i586\u0026upstream=perl-DBI-0:1.628-5.21.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "perl-DBI-0:1.628-5.21.1.ppc64le",
"product": {
"name": "perl-DBI-0:1.628-5.21.1.ppc64le",
"product_id": "perl-DBI-0:1.628-5.21.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:perl:database_interface:1.628:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/perl-DBI@1.628-5.21.1?arch=ppc64le\u0026upstream=perl-DBI-0:1.628-5.21.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "perl-DBI-0:1.628-5.21.1.s390",
"product": {
"name": "perl-DBI-0:1.628-5.21.1.s390",
"product_id": "perl-DBI-0:1.628-5.21.1.s390",
"product_identification_helper": {
"cpe": "cpe:2.3:a:perl:database_interface:1.628:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/perl-DBI@1.628-5.21.1?arch=s390\u0026upstream=perl-DBI-0:1.628-5.21.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "perl-DBI-0:1.628-5.21.1.s390x",
"product": {
"name": "perl-DBI-0:1.628-5.21.1.s390x",
"product_id": "perl-DBI-0:1.628-5.21.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:perl:database_interface:1.628:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/perl-DBI@1.628-5.21.1?arch=s390x\u0026upstream=perl-DBI-0:1.628-5.21.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "perl-DBI-0:1.628-5.21.1.x86_64",
"product": {
"name": "perl-DBI-0:1.628-5.21.1.x86_64",
"product_id": "perl-DBI-0:1.628-5.21.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:perl:database_interface:1.628:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/perl-DBI@1.628-5.21.1?arch=x86_64\u0026upstream=perl-DBI-0:1.628-5.21.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 12 SP5",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 12 SP5",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-hpc:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perl-DBI-0:1.628-5.21.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
},
"product_reference": "perl-DBI-0:1.628-5.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-14380",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14380"
}
],
"notes": [
{
"category": "general",
"text": "DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile.\n\nWhen a string is assigned to a DBI handle\u0027s Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package name.\n\nAny caller-influenced value that reaches the Profile attribute is therefore arbitrary Perl code execution, including calls to run system commands.\n\nThe Profile attribute can be set from three different sources that can carry untrusted data: the DBI_PROFILE environment variable, a direct attribute assignment, and a DSN driver-attribute clause dbi:Driver(Profile=\u003eSPEC):db.\n\nAn attacker controlling any of those inputs runs arbitrary Perl in the host process. The strongest remote position is a network-exposed DBI::Gofer / DBI::ProxyServer whose per-request DSN reaches the Profile attribute, letting a client execute code on the broker host.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14380",
"url": "https://www.suse.com/security/cve/CVE-2026-14380"
},
{
"category": "external",
"summary": "SUSE Bug 1271018 for CVE-2026-14380",
"url": "https://bugzilla.suse.com/1271018"
},
{
"category": "external",
"summary": "SUSE Bug 1279550 for CVE-2026-14380",
"url": "https://bugzilla.suse.com/1279550"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-03T12:13:48Z",
"details": "important"
}
],
"title": "CVE-2026-14380"
},
{
"cve": "CVE-2026-14740",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14740"
}
],
"notes": [
{
"category": "general",
"text": "DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment.\n\nThe preparse method normalises SQL and removes comments. When the SQL starts with a comment line, the deletion of that line during normalisation led to an out-of-bounds read by one byte. The result is a fault on memory-hardened builds and nondeterministic newline retention on normal builds.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14740",
"url": "https://www.suse.com/security/cve/CVE-2026-14740"
},
{
"category": "external",
"summary": "SUSE Bug 1271017 for CVE-2026-14740",
"url": "https://bugzilla.suse.com/1271017"
},
{
"category": "external",
"summary": "SUSE Bug 1279550 for CVE-2026-14740",
"url": "https://bugzilla.suse.com/1279550"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-03T12:13:48Z",
"details": "moderate"
}
],
"title": "CVE-2026-14740"
},
{
"cve": "CVE-2026-15043",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-15043"
}
],
"notes": [
{
"category": "general",
"text": "DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted \u003c= and \u003e= SQL operators on text.\n\nDBI::SQL::Nano, DBI\u0027s built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the is_matched method, \u003c= was evaluated using Perl\u0027s ge operator, and \u003e= was evaluated using Perl\u0027s le operator.\n\nSQL::Nano is the fallback query engine for DBI\u0027s file-backed drivers (DBD::File, DBD::DBM, CSV-style drivers) whenever SQL::Statement is not installed, and is forced whenever DBI_SQL_NANO=1. Queries over such tables use these predicates directly.\n\nThe impact depends on the context. Where an application relies on a WHERE clause to filter file-backed data for policy or authorization, an inverted \u003c=/\u003e= comparison silently returns the wrong rows.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-15043",
"url": "https://www.suse.com/security/cve/CVE-2026-15043"
},
{
"category": "external",
"summary": "SUSE Bug 1271399 for CVE-2026-15043",
"url": "https://bugzilla.suse.com/1271399"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-03T12:13:48Z",
"details": "moderate"
}
],
"title": "CVE-2026-15043"
},
{
"cve": "CVE-2026-15392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-15392"
}
],
"notes": [
{
"category": "general",
"text": "DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location.\n\nThe complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories.\n\nCallers of file-based drivers can read or write files outside of the data directory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-15392",
"url": "https://www.suse.com/security/cve/CVE-2026-15392"
},
{
"category": "external",
"summary": "SUSE Bug 1271629 for CVE-2026-15392",
"url": "https://bugzilla.suse.com/1271629"
},
{
"category": "external",
"summary": "SUSE Bug 1271822 for CVE-2026-15392",
"url": "https://bugzilla.suse.com/1271822"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-03T12:13:48Z",
"details": "important"
}
],
"title": "CVE-2026-15392"
},
{
"cve": "CVE-2026-60081",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-60081"
}
],
"notes": [
{
"category": "general",
"text": "DBI::ProfileData versions before 1.651 for Perl do not limit the path index.\n\nThe path index column of profile dump files is used to allocate an array of data for the parser. An unbounded value allows an attacker to specify a large index and consume available memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-60081",
"url": "https://www.suse.com/security/cve/CVE-2026-60081"
},
{
"category": "external",
"summary": "SUSE Bug 1271458 for CVE-2026-60081",
"url": "https://bugzilla.suse.com/1271458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-03T12:13:48Z",
"details": "moderate"
}
],
"title": "CVE-2026-60081"
},
{
"cve": "CVE-2026-60082",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-60082"
}
],
"notes": [
{
"category": "general",
"text": "DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row.\n\nWhen the statement handle had no fields but the source row was non-empty, the internal row-buffer helper would read from a negative array index.\n\nThis could be triggered by a caller supplying inconsistent metadata and rows to the prepare method.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-60082",
"url": "https://www.suse.com/security/cve/CVE-2026-60082"
},
{
"category": "external",
"summary": "SUSE Bug 1271459 for CVE-2026-60082",
"url": "https://bugzilla.suse.com/1271459"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:perl-DBI-0:1.628-5.21.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-03T12:13:48Z",
"details": "moderate"
}
],
"title": "CVE-2026-60082"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…