[Git][security-tracker-team/security-tracker][master] Track fixed version for libnet-idn-encode-perl issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bd0e2845 by Salvatore Bonaccorso at 2026-10-31T07:52:28+01:00
Track fixed version for libnet-idn-encode-perl issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -58160,38 +58160,38 @@ CVE-2026-86805 (A time-of-check to time-of-use (TOCTOU) race condition in the dy
 	NOTE: https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0022
 	NOTE: Fixed by: https://sourceware.org/git/?p=glibc.git;a=commit;h=ed0c137b97eb940b4b64981e84ed806d3276edd9
 CVE-2026-87082 (Net::IDN::Punycode versions before 2.590 for Perl hang, crash or retur ...)
-	- libnet-idn-encode-perl <unfixed> (bug #1148729)
+	- libnet-idn-encode-perl 2.600-1 (bug #1148729)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43753021/
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/0918fb4a951ed5f4494c4cf202419c2842507ea4 (v2.590-TRIAL)
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/59dc7f2c605a897bcbfe0ac5eb2b8dbe6792348d (v2.590-TRIAL)
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/accb6df57ad107ec0c4bfb27b21551eed97c700e (v2.590-TRIAL)
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/572af0183b3a6294e22c6b509268da09697cf77d (v2.590-TRIAL)
 CVE-2026-87081 (Net::IDN::UTS46 versions before 2.590 for Perl allow CPU exhaustion vi ...)
-	- libnet-idn-encode-perl <unfixed> (bug #1148729)
+	- libnet-idn-encode-perl 2.600-1 (bug #1148729)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43753018/
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/5ac3315131264670efcd3a29857b651506dfee8e (v2.590-TRIAL)
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/ea34f812d7dc67f3b211f4d92e74c6a7e24d764a (v2.590-TRIAL)
 CVE-2026-87080 (Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncat ...)
-	- libnet-idn-encode-perl <unfixed> (bug #1148729)
+	- libnet-idn-encode-perl 2.600-1 (bug #1148729)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43753025/
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/48436c7ad2c4d4c6398110e11133754fc476a783 (v2.590-TRIAL)
 CVE-2026-87079 (Net::IDN::Punycode versions before 2.590 for Perl allow CPU exhaustion ...)
-	- libnet-idn-encode-perl <unfixed> (bug #1148729)
+	- libnet-idn-encode-perl 2.600-1 (bug #1148729)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43753023/
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/00d723423b66810af26b88c552bedc61975b3078 (v2.590-TRIAL)
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/447c6b38ef5d4570329fa4f78690f4e14e09ba0c (v2.590-TRIAL)
 CVE-2026-87078 (Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the  ...)
-	- libnet-idn-encode-perl <unfixed> (bug #1148729)
+	- libnet-idn-encode-perl 2.600-1 (bug #1148729)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43753020/
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/92572f726e48af5559de4cc8a831463b79dfb217 (v2.590-TRIAL)
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/edad63e0eeeeb18d93bc6dfe4d9dcdff9c244e1b (v2.590-TRIAL)
 CVE-2026-74766 (Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a h ...)
-	- libnet-idn-encode-perl <unfixed> (bug #1148729)
+	- libnet-idn-encode-perl 2.600-1 (bug #1148729)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43753027/
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/259e74c5739175b063c5393a4ce4a0705678ba61 (v2.590-TRIAL)
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/2fbc71e4d8517ab65c5d5d35fda086371b735a3f (v2.590-TRIAL)
 CVE-2026-74765 (Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-boun ...)
-	- libnet-idn-encode-perl <unfixed> (bug #1148729)
+	- libnet-idn-encode-perl 2.600-1 (bug #1148729)
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/43753029/
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/27a91ccdb6c9b41f75ba198f5ae154d14e225de2 (v2.590-TRIAL)
 	NOTE: Fixed by: https://github.com/robrwo/Net-IDN-Encode/commit/81c7f99fe7430bdc5116081508dffdb56f376861 (v2.590-TRIAL)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd0e28455386b0b98fc86007a889e9ffba793405

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd0e28455386b0b98fc86007a889e9ffba793405
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/1b8e1261/attachment.htm>