USN-8912-1: flaws in the Perl DBI module may allow code execution or denial of service

Notice USN-8912-1, published October 12, 2026 in the Ubuntu Security feed, describes two flaws in the Perl DBI module. The first, CVE-2026-78030, is a validation problem with certain attributes that, according to the notice, could possibly allow an attacker to execute arbitrary code. The second, CVE-2026-88816, is a problem in handling certain string operations that could possibly cause denial of service. The notice credits the discovery to a researcher, whose name is not reproduced here. The available text is an automatic translation of the feed content, so the original wording should be consulted. To check the full content, search for the identifier USN-8912-1 on the official Ubuntu security notices site. Perl DBI is a database access library used by Perl scripts and applications; teams that maintain these systems should assess whether the package is installed and in which version. Rota Nacional does not patch operating system libraries or run vulnerability scans, and this notice is not a platform feature. The remedy indicated is to update the package through the system package manager, following the fixed versions listed in the official notice. To check the result, compare the installed version with the fixed version stated by the vendor and record the verification in your internal change management process.