-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 31 Oct 2026 02:21:37 +0100 Source: libnet-idn-encode-perl Architecture: source Version: 2.600-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1148729 Changes: libnet-idn-encode-perl (2.600-1) unstable; urgency=medium . * Team upload. * Import upstream version 2.600. - fix CVE-2026-74766, a heap use-after-free in the XS decode_punycode - fix CVE-2026-74765, an integer overflow and out-of-bounds read in the XS encode_punycode - fix CVE-2026-87078, memory leaks when the XS functions reject input - fix CVE-2026-87079, quadratic decoding of large labels - fix CVE-2026-87080, the pure-Perl decoder accepting a truncated label - fix CVE-2026-87081, quadratic encoding of overlong labels in to_ascii - fix CVE-2026-87082, the XS encode_punycode looping for ever on malformed UTF-8 input Closes: #1148729 * Add test dependency on libtest-leaktrace-perl. Checksums-Sha1: bfc9ba9362bbc2ca44fef5d7720650db91095eff 2535 libnet-idn-encode-perl_2.600-1.dsc a56ca81236273a6a2821286ad59883a8f9852b95 656945 libnet-idn-encode-perl_2.600.orig.tar.gz 853d21b9c26c3f6ed10e3b3b58765ef28f5fd20f 4084 libnet-idn-encode-perl_2.600-1.debian.tar.xz 00b3fd487f4a0fb66d33fda5f76fe78a93c5d882 949676 libnet-idn-encode-perl_2.600-1.git.tar.xz 3df8223d095beca11d2f90103a139a4490aa6ecd 17797 libnet-idn-encode-perl_2.600-1_source.buildinfo Checksums-Sha256: 06b2fa4cafa297ac706bfbd22cbfdd1cc2367cb85a86b074517793a331ad208d 2535 libnet-idn-encode-perl_2.600-1.dsc 104f56c025ca7c914741bd860d0faee988242b9fa5043885fdf024e870df7bf3 656945 libnet-idn-encode-perl_2.600.orig.tar.gz 48dc63e6b1e00ec27cabaf898f11807b41eb51ae877c3e9fb26db9bf7e422468 4084 libnet-idn-encode-perl_2.600-1.debian.tar.xz 3f7f23793a89863770a45e6b9c2bf332c7fe5068e82a0a4b9e45205b7552845c 949676 libnet-idn-encode-perl_2.600-1.git.tar.xz 199a6c8e2f774ccb8c0d95d6cdbeed873e3322f71b2e2d6bc14e504d86a31664 17797 libnet-idn-encode-perl_2.600-1_source.buildinfo Files: 45ae6b1facc937f5efbd704eaa40dadf 2535 perl optional libnet-idn-encode-perl_2.600-1.dsc a28cd955a4746958e51cc661798a5f7d 656945 perl optional libnet-idn-encode-perl_2.600.orig.tar.gz bd86005f02dc654399f067a3973793ef 4084 perl optional libnet-idn-encode-perl_2.600-1.debian.tar.xz f3fd8734197d12b8f46be6682d94df47 949676 perl None libnet-idn-encode-perl_2.600-1.git.tar.xz db005e6ddcba58c09dd5a3a2bee3cdc0 17797 perl optional libnet-idn-encode-perl_2.600-1_source.buildinfo Git-Tag-Info: tag=89d99cd9f61bd9b18c286ee91859bb190062d54a fp=d1e1316e93a760a8104d85fabb3a68018649aa06 Git-Tag-Tagger: gregor herrmann <gregoa@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmrlQ1gACgkQYG0ITkaD wHmIQRAAuT4m8BWCmEZcEbb/VxZ6R43H9QbnJ/nUhVH+UjaDFpBPB/5DeikERIy5 jt/zESnZbcFEdCX8nc9hnftJilB2mOGLt/7vGKTFkG8UiUBTi/RNhaSTy/vNtEhb 1+K4kPzVNqb0B8Av92m8cgseT7yuvqGd5EO+74MtLtYXeZZ+1vUkxdD7IGBzSRr9 TkXN0OY3Z4SHohSCatVmMv9JP1L0MrDqZni+s0dOMYc6Gs/q36JLXMW2o14d9KF3 SkJ214p7GS8lwGu0+T9+iyUyzf8nZfgJ9pBwqIn8vxe4jX5lW8STwsXUoSVOeRZ6 jXmelzdxI1YdQC+u0CV67gQMz2ZL138m+SN0FjfIA5wWdlGfekWuqGXYIaH2dhDu 6S6JQmbBflTpk7xLQTA6Kl0UGEhLtL25O1BriKR4ZfhjRFNmdsq4tYZweM1xQ6i3 fe/oohz8RB0JuFVMT8EoRWMA4Op4uy29nugIRWjQ2p8WEF7F3vqCez6GwAPJg2Hk ZlIOUA4f4XChxvZ89kE2Oy70xO3XiezAAC0lF8i8hhPBu+AFmsXh1M3gu+IwLB+t y0y7ev3QabiImRrDaQIa2t1CeaRJs1ytJHlr12oc3CcZ5mu5Aa3ne1EwPyYiRx2n xDGbTQlHso692litM4EhvsYdct4YaZEYu5cY33hJbFC3hhnk0yk= =M7PR -----END PGP SIGNATURE-----
