QSN-8841-1: Perl DBI module vulnerabilities
2026-09-29

Summary:
Perl DBI module could be made to crash or run programs as your login if it
opened a specially crafted file.

Details:
It was discovered that the Perl DBI module did not correctly handle
certain integer arithmetic operations. An attacker could possibly use
this issue to cause a denial of service or execute arbitrary code.
(CVE-2026-73193, CVE-2026-73194)

Affected QuantaStor releases:
  6.9.1.001 jammy: libdbi-perl 1.643-3ubuntu0.4 (fixed in 1.643-3ubuntu0.3)
  6.9.0.464 jammy: libdbi-perl 1.643-3ubuntu0.4 (fixed in 1.643-3ubuntu0.3)
  6.8.6.015 jammy: libdbi-perl 1.643-3ubuntu0.1 (fixed in 1.643-3ubuntu0.3)
  6.8.5.018 jammy: libdbi-perl 1.643-3ubuntu0.1 (fixed in 1.643-3ubuntu0.3)
  6.8.4.038 jammy: libdbi-perl 1.643-3ubuntu0.1 (fixed in 1.643-3ubuntu0.3)
  6.8.3.018 jammy: libdbi-perl 1.643-3ubuntu0.1 (fixed in 1.643-3ubuntu0.3)
  6.8.2.002 jammy: libdbi-perl 1.643-3build3 (fixed in 1.643-3ubuntu0.3)
  6.8.1.007 jammy: libdbi-perl 1.643-3ubuntu0.1 (fixed in 1.643-3ubuntu0.3)
  6.8.0.205 jammy: libdbi-perl 1.643-3ubuntu0.1 (fixed in 1.643-3ubuntu0.3)

CVEs: CVE-2026-73194, CVE-2026-73193

References:
  https://ubuntu.com/security/notices/USN-8841-1