Merge PR "[AUTO-CHERRYPICK] Upgrade perl-DBI to 1.650 for CVE-2026-14380, CVE-2026-14739 & CVE-2026-14740 [HIGH] - branch 3.0-dev" #17997

Signed-off-by: Kanishk Bansal <kanbansal@microsoft.com>
Co-authored-by: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com>
Co-authored-by: Kanishk Bansal <kanbansal@microsoft.com>

Author: 3 people

SPECS/perl-DBI/CVE-2026-10879.patch

@@ -1,5 +1,5 @@
 {
  "Signatures": {
-  "DBI-1.643.tar.gz": "8a2b993db560a2c373c174ee976a51027dd780ec766ae17620c20393d2e836fa"
+  "DBI-1.650.tgz": "a807b817c1cfb0fe6ecccff1d9ddeb293c317d518f5ab2007dfb9d3bccdbcf83"
  }
 }

SPECS/perl-DBI/CVE-2026-9698.patch

@@ -4,21 +4,18 @@
 
 Summary:        A database access API for perl
 Name:           perl-DBI
-Version:        1.643
-Release:        5%{?dist}
+Version:        1.650
+Release:        1%{?dist}
 Group:          Development/Libraries
 License:        GPL+ or Artistic
 URL:            http://dbi.perl.org/
-# The source tarball must be repackaged to remove the DBI/FAQ.pm, since the
-# license is not a FSF free license.
-Source0:        https://cpan.metacpan.org/authors/id/T/TI/TIMB/DBI-%{version}.tar.gz
-Patch0:         CVE-2026-10879.patch
-Patch1:         CVE-2026-9698.patch
+Source0:        https://cpan.metacpan.org/authors/id/H/HM/HMBRAND/DBI-%{version}.tgz
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
 BuildRequires:  perl >= 5.28.0
 BuildRequires:  perl-generators
 BuildRequires:  perl(ExtUtils::MakeMaker)
+BuildRequires:  perl(Module::Load)
 %if 0%{?with_check}
 BuildRequires:  perl(blib)
 BuildRequires:  perl(Test::More)
@@ -27,6 +24,7 @@ BuildRequires:  perl(Test::More)
 Requires:       perl-libs
 Requires:       perl(FileHandle)
 Requires:       perl(Math::BigInt)
+Requires:       perl(Module::Load)
 
 Provides:       perl(DBD::DBM) = %{version}-%{release}
 Provides:       perl(DBD::DBM::Statement) = %{version}-%{release}
@@ -164,6 +162,9 @@ make test
 %{_mandir}/man3/*.3*
 
 %changelog
+* Sat Jul 11 2026 Kanishk Bansal <kanbansal@microsoft.com> - 1.650-1
+- Upgrade to 1.650 for CVE-2026-14380, CVE-2026-14739 & CVE-2026-14740
+
 * Wed Jun 17 2026 Azure Linux Security Servicing Account <azurelinux-security@microsoft.com> - 1.643-5
 - Patch for CVE-2026-9698
 

SPECS/perl-DBI/perl-DBI.signatures.json

@@ -17323,8 +17323,8 @@
         "type": "other",
         "other": {
           "name": "perl-DBI",
-          "version": "1.643",
-          "downloadUrl": "https://cpan.metacpan.org/authors/id/T/TI/TIMB/DBI-1.643.tar.gz"
+          "version": "1.650",
+          "downloadUrl": "https://cpan.metacpan.org/authors/id/H/HM/HMBRAND/DBI-1.650.tgz"
         }
       }
     },

SPECS/perl-DBI/perl-DBI.spec

@@ -336,8 +336,8 @@ perl-CPAN-Meta-YAML-0.018-512.azl3.noarch.rpm
 perl-Data-Dumper-2.188-512.azl3.aarch64.rpm
 perl-DBD-SQLite-1.74-2.azl3.aarch64.rpm
 perl-DBD-SQLite-debuginfo-1.74-2.azl3.aarch64.rpm
-perl-DBI-1.643-5.azl3.aarch64.rpm
-perl-DBI-debuginfo-1.643-5.azl3.aarch64.rpm
+perl-DBI-1.650-1.azl3.aarch64.rpm
+perl-DBI-debuginfo-1.650-1.azl3.aarch64.rpm
 perl-DBIx-Simple-1.37-7.azl3.noarch.rpm
 perl-DBM_Filter-0.06-512.azl3.noarch.rpm
 perl-debugger-1.60-512.azl3.noarch.rpm

cgmanifest.json

@@ -344,8 +344,8 @@ perl-CPAN-Meta-YAML-0.018-512.azl3.noarch.rpm
 perl-Data-Dumper-2.188-512.azl3.x86_64.rpm
 perl-DBD-SQLite-1.74-2.azl3.x86_64.rpm
 perl-DBD-SQLite-debuginfo-1.74-2.azl3.x86_64.rpm
-perl-DBI-1.643-5.azl3.x86_64.rpm
-perl-DBI-debuginfo-1.643-5.azl3.x86_64.rpm
+perl-DBI-1.650-1.azl3.x86_64.rpm
+perl-DBI-debuginfo-1.650-1.azl3.x86_64.rpm
 perl-DBIx-Simple-1.37-7.azl3.noarch.rpm
 perl-DBM_Filter-0.06-512.azl3.noarch.rpm
 perl-debugger-1.60-512.azl3.noarch.rpm