[From nobody Sat Oct 31 01:53:05 2026 Received: (at 1148729-close) by bugs.debian.org; 31 Oct 2026 01:49:46 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 101; hammy, 150; neutral, 184; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:54088) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xMyE6-006Hi6-1f for 1148729-close@bugs.debian.org; Sat, 31 Oct 2026 01:49:46 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xMyE7-0017wd-08 for 1148729-close@bugs.debian.org; Sat, 31 Oct 2026 01:49:46 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=HWLzymhtmWlwlSdbTj6+wn4wQuG1Bi3Vm6BBFf8/g5k=; b=SimaoVIXJ60cvFo3tC3sS8MQg0 VFV76JHJYBoCN6mFfIJapWWc5ZDTdlz/1DHm5HXf48tUwLL5kZP8FhM51H33GsS+X/sKxTlUEzYL4 l5LHWtoDFPH8jsPJ2lJiujUPZKq7G40kOQh1/k8tzzvYjvGfoXk7vMMRrId0PbfgI1gjOdluaEZIn cvn1XvflGsHmIsFmUkwcjlYnSUZIcMsigRFJPASfiFH33smNxp+TRuld1GYpJ1PdePhlMkFP56C6e EE3273GvYZXrSunmKip9NRxs5wEdF0iRAYoZzz/lduoMjHP00l/6xUYvq+ynGuU4t3u8uewLwOJyz 1+b+xTRg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xMyE5-0000000GFdU-1Qi4; Sat, 31 Oct 2026 01:49:45 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1148729-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libnet-idn-encode-perl Debian: DAK Debian-Changes: libnet-idn-encode-perl_2.600-1_source.changes Debian-Source: libnet-idn-encode-perl Debian-Version: 2.600-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1148729: fixed in libnet-idn-encode-perl 2.600-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============2083048219348386572==" Message-Id: <E1xMyE5-0000000GFdU-1Qi4@fasolo.debian.org> Date: Sat, 31 Oct 2026 01:49:45 +0000 --===============2083048219348386572== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libnet-idn-encode-perl Source-Version: 2.600-1 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of libnet-idn-encode-perl, which is due to be installed in the Debian FTP archiv= e. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1148729@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated libnet-idn-encode-pe= rl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 31 Oct 2026 02:21:37 +0100 Source: libnet-idn-encode-perl Architecture: source Version: 2.600-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1148729 Changes: libnet-idn-encode-perl (2.600-1) unstable; urgency=3Dmedium . * Team upload. * Import upstream version 2.600. - fix CVE-2026-74766, a heap use-after-free in the XS decode_punycode - fix CVE-2026-74765, an integer overflow and out-of-bounds read in the XS encode_punycode - fix CVE-2026-87078, memory leaks when the XS functions reject input - fix CVE-2026-87079, quadratic decoding of large labels - fix CVE-2026-87080, the pure-Perl decoder accepting a truncated label - fix CVE-2026-87081, quadratic encoding of overlong labels in to_ascii - fix CVE-2026-87082, the XS encode_punycode looping for ever on malformed UTF-8 input Closes: #1148729 * Add test dependency on libtest-leaktrace-perl. Checksums-Sha1: bfc9ba9362bbc2ca44fef5d7720650db91095eff 2535 libnet-idn-encode-perl_2.600-1= .dsc a56ca81236273a6a2821286ad59883a8f9852b95 656945 libnet-idn-encode-perl_2.600= .orig.tar.gz 853d21b9c26c3f6ed10e3b3b58765ef28f5fd20f 4084 libnet-idn-encode-perl_2.600-1= .debian.tar.xz 00b3fd487f4a0fb66d33fda5f76fe78a93c5d882 949676 libnet-idn-encode-perl_2.600= -1.git.tar.xz 3df8223d095beca11d2f90103a139a4490aa6ecd 17797 libnet-idn-encode-perl_2.600-= 1_source.buildinfo Checksums-Sha256: 06b2fa4cafa297ac706bfbd22cbfdd1cc2367cb85a86b074517793a331ad208d 2535 libnet= -idn-encode-perl_2.600-1.dsc 104f56c025ca7c914741bd860d0faee988242b9fa5043885fdf024e870df7bf3 656945 libn= et-idn-encode-perl_2.600.orig.tar.gz 48dc63e6b1e00ec27cabaf898f11807b41eb51ae877c3e9fb26db9bf7e422468 4084 libnet= -idn-encode-perl_2.600-1.debian.tar.xz 3f7f23793a89863770a45e6b9c2bf332c7fe5068e82a0a4b9e45205b7552845c 949676 libn= et-idn-encode-perl_2.600-1.git.tar.xz 199a6c8e2f774ccb8c0d95d6cdbeed873e3322f71b2e2d6bc14e504d86a31664 17797 libne= t-idn-encode-perl_2.600-1_source.buildinfo Files: 45ae6b1facc937f5efbd704eaa40dadf 2535 perl optional libnet-idn-encode-perl_2= .600-1.dsc a28cd955a4746958e51cc661798a5f7d 656945 perl optional libnet-idn-encode-perl= _2.600.orig.tar.gz bd86005f02dc654399f067a3973793ef 4084 perl optional libnet-idn-encode-perl_2= .600-1.debian.tar.xz f3fd8734197d12b8f46be6682d94df47 949676 perl None libnet-idn-encode-perl_2.6= 00-1.git.tar.xz db005e6ddcba58c09dd5a3a2bee3cdc0 17797 perl optional libnet-idn-encode-perl_= 2.600-1_source.buildinfo Git-Tag-Info: tag=3D89d99cd9f61bd9b18c286ee91859bb190062d54a fp=3Dd1e1316e93a= 760a8104d85fabb3a68018649aa06 Git-Tag-Tagger: gregor herrmann <gregoa@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmrlQ1gACgkQYG0ITkaD wHmIQRAAuT4m8BWCmEZcEbb/VxZ6R43H9QbnJ/nUhVH+UjaDFpBPB/5DeikERIy5 jt/zESnZbcFEdCX8nc9hnftJilB2mOGLt/7vGKTFkG8UiUBTi/RNhaSTy/vNtEhb 1+K4kPzVNqb0B8Av92m8cgseT7yuvqGd5EO+74MtLtYXeZZ+1vUkxdD7IGBzSRr9 TkXN0OY3Z4SHohSCatVmMv9JP1L0MrDqZni+s0dOMYc6Gs/q36JLXMW2o14d9KF3 SkJ214p7GS8lwGu0+T9+iyUyzf8nZfgJ9pBwqIn8vxe4jX5lW8STwsXUoSVOeRZ6 jXmelzdxI1YdQC+u0CV67gQMz2ZL138m+SN0FjfIA5wWdlGfekWuqGXYIaH2dhDu 6S6JQmbBflTpk7xLQTA6Kl0UGEhLtL25O1BriKR4ZfhjRFNmdsq4tYZweM1xQ6i3 fe/oohz8RB0JuFVMT8EoRWMA4Op4uy29nugIRWjQ2p8WEF7F3vqCez6GwAPJg2Hk ZlIOUA4f4XChxvZ89kE2Oy70xO3XiezAAC0lF8i8hhPBu+AFmsXh1M3gu+IwLB+t y0y7ev3QabiImRrDaQIa2t1CeaRJs1ytJHlr12oc3CcZ5mu5Aa3ne1EwPyYiRx2n xDGbTQlHso692litM4EhvsYdct4YaZEYu5cY33hJbFC3hhnk0yk=3D =3DM7PR -----END PGP SIGNATURE----- --===============2083048219348386572== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCauVJOQAKCRCb9qggYcy5 IW6iAQD1KpYCtEXgzxHL0/ORBU/x3/A0+CeHwdUh3i2OkQjuYAEAn5sV6xsqDUOM bdoDN+UrYbrLkBx+AUcbLMvBl1VXDAg= =WNuS -----END PGP SIGNATURE----- --===============2083048219348386572==-- ]