Cyber ·
CVE-2026-111879: Perl DBI can hang when reopening a DBD::DBM table
CPAN Security Group advisory: DBI versions before 1.656 can hang when reopening a DBD::DBM table. A failed data open does not release the table lock, so the next open hangs.
Radar records an advisory published on 20 October 2026 in the oss-sec feed, identified as CVE-2026-111879. The affected distribution is DBI, the Perl database access library, in versions before 1.656. According to the advisory, a failed data open does not release the table lock, so a later open hangs in vulnerable versions. The source lists MetaCPAN and the DBI project's VCS repository as references, plus the original text on seclists.org, which should be consulted for the full details. The text received is an automatic translation and does not state an impact scale or severity score. To verify, open the original advisory and confirm the fixed version in the project repository. This is an availability issue: the described effect is a hang, not unauthorized access to data.