QSN-8912-1: Perl DBI module vulnerabilities
2026-10-12

Summary:
Several security issues were fixed in Perl DBI module.

Details:
Harsh Raj Singhania discovered that the Perl DBI module did not
correctly validate certain attributes. An attacker could possibly use
this issue to execute arbitrary code. (CVE-2026-78030)

Harsh Raj Singhania discovered that the Perl DBI module did not
correctly handle certain string operations. An attacker could possibly
use this issue to cause a denial of service. (CVE-2026-88816)

Affected QuantaStor releases:
  6.9.1.001 jammy: libdbi-perl 1.643-3ubuntu0.4 (fixed in 1.643-3ubuntu0.4)
  6.9.0.464 jammy: libdbi-perl 1.643-3ubuntu0.4 (fixed in 1.643-3ubuntu0.4)
  6.8.6.015 jammy: libdbi-perl 1.643-3ubuntu0.1 (fixed in 1.643-3ubuntu0.4)
  6.8.5.018 jammy: libdbi-perl 1.643-3ubuntu0.1 (fixed in 1.643-3ubuntu0.4)
  6.8.4.038 jammy: libdbi-perl 1.643-3ubuntu0.1 (fixed in 1.643-3ubuntu0.4)
  6.8.3.018 jammy: libdbi-perl 1.643-3ubuntu0.1 (fixed in 1.643-3ubuntu0.4)
  6.8.2.002 jammy: libdbi-perl 1.643-3build3 (fixed in 1.643-3ubuntu0.4)
  6.8.1.007 jammy: libdbi-perl 1.643-3ubuntu0.1 (fixed in 1.643-3ubuntu0.4)
  6.8.0.205 jammy: libdbi-perl 1.643-3ubuntu0.1 (fixed in 1.643-3ubuntu0.4)

CVEs: CVE-2026-88816, CVE-2026-78030

References:
  https://ubuntu.com/security/notices/USN-8912-1