-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 24 Oct 2026 14:25:16 +0200 Source: dnspython Architecture: source Version: 2.8.0-7 Distribution: unstable Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Closes: 1151842 Changes: dnspython (2.8.0-7) unstable; urgency=medium . * Backport upstream fix for CVE-2026-114605: limit DNS compression pointer chains to 16 hops to prevent excessive CPU use (denial of service) when parsing untrusted wire-format messages (Closes: #1151842): - 0003-Limit-decompression-to-a-chain-length-of-at-most-16-.patch Checksums-Sha1: 679a5688e9ea093e1542cf6c445e69825645fc30 2573 dnspython_2.8.0-7.dsc 1c0601b5606997b6c5906760be5776a659387ede 10184 dnspython_2.8.0-7.debian.tar.xz 77e501b0d1dd5c94d2c796ed3626cac1cabfcd10 7772 dnspython_2.8.0-7_amd64.buildinfo Checksums-Sha256: 1d135054895bb05dd5ab80f8b21a44fa0b6bd9208c4ba7d3786eaf63d68bd019 2573 dnspython_2.8.0-7.dsc b140d6bdfc1c2c1442fa5f85671a90fd8a599ff6df1f38c51f44a7fa607b0371 10184 dnspython_2.8.0-7.debian.tar.xz 92877343e83990147249e81bf5d477f53dacd97fff51df06dbd46e0133d30908 7772 dnspython_2.8.0-7_amd64.buildinfo Files: a52c1aa94698834d1c425b55348877d5 2573 python optional dnspython_2.8.0-7.dsc 271da8aa30d44035f8570b76a81f2213 10184 python optional dnspython_2.8.0-7.debian.tar.xz a75ba5ae46b2d74fbbd4c6fa19f19fe9 7772 python optional dnspython_2.8.0-7_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmrjEfIACgkQ1BatFaxr Q/4iXw/+PgSKg65NLQ+I5fM7qtC+Tra1Et4LkCRUJRLUhL7f0YQAdx3ZYH9zei/m u6KxE1vJDy+oTrz92U1khPTn6rYTifCF5jOQfJTk1VMz2OtVGMM7bHJTd8jPXoSF l++5PRFJkEi0GuVVH4MAVTRneE+fashfpM4qsWjI3tNINgSiZLjg0RXDnPmNFCw3 Gd7PeBsInMcrYCX/KxErVzkTXGtsZv9s0R2LduOS+79gGWGWzWywjPWGUR2oR89/ 94tAXhKO2tuyVjl/HsXBvnreczH4bB2wXpyz14PFzJjONlL4XuOCGgZkBspzyQVJ biImNRpoVL4KThyyPEfz8VvCPVJvlgSXexQ/YpbbUvQHEjcmkcTX/oK1H8wygR71 ww1W0U0FOqF9wxQQt/M/3auIIwFIX5OCJtKZ0yJ33acDDCHkj3lx7tLT/UhqOgtW OILgxNu/qvElUFtOz+vWpx47B4mmVN6Q+iTQIu2XoKPfkRsT4c21EyUoAMuTrD7F gj5OgbbHutUWh4UvBsNgbHw5v0K/Qa7ThRH77IFsHR5N8shng7Q5uGL790Tm6Xej 9pjxIFSj+EGcyZ0Od9pC8YpKQK464jGvTG7M6Sv4Z4PM54cf++rfiXKLISuLypWs 0CzSWMfZwdZ8On0R81fBRd99COWdUjeZZw78Nsn3JWeoJ2Owv1k= =tUKb -----END PGP SIGNATURE-----
