Bug#986135: libnet-netmask-perl: CVE-2021-29424: mis-parses IP addresses in some situations

[Rob N]

Package: libnet-netmask-perl
Version: 1.9104-1
Severity: normal

Dear Maintainer,

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29424
https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/
https://metacpan.org/changes/distribution/Net-Netmask#L11-22

Fix exists upstream, and should be trivially backportable.

-- System Information:
Debian Release: 10.9
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-14-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libnet-netmask-perl depends on:
ii  perl  5.28.1-6+deb10u1

libnet-netmask-perl recommends no packages.

libnet-netmask-perl suggests no packages.