libnet-idn-encode-perl_2.600-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 31 Oct 2026 02:21:37 +0100
Source: libnet-idn-encode-perl
Architecture: source
Version: 2.600-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers at lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa at debian.org>
Closes: 1148729
Changes:
 libnet-idn-encode-perl (2.600-1) unstable; urgency=medium
 .
   * Team upload.
   * Import upstream version 2.600.
     - fix CVE-2026-74766, a heap use-after-free in the XS decode_punycode
     - fix CVE-2026-74765, an integer overflow and out-of-bounds read in the
       XS encode_punycode
     - fix CVE-2026-87078, memory leaks when the XS functions reject input
     - fix CVE-2026-87079, quadratic decoding of large labels
     - fix CVE-2026-87080, the pure-Perl decoder accepting a truncated label
     - fix CVE-2026-87081, quadratic encoding of overlong labels in to_ascii
     - fix CVE-2026-87082, the XS encode_punycode looping for ever on
       malformed UTF-8 input
     Closes: #1148729
   * Add test dependency on libtest-leaktrace-perl.
Checksums-Sha1:
 bfc9ba9362bbc2ca44fef5d7720650db91095eff 2535 libnet-idn-encode-perl_2.600-1.dsc
 a56ca81236273a6a2821286ad59883a8f9852b95 656945 libnet-idn-encode-perl_2.600.orig.tar.gz
 853d21b9c26c3f6ed10e3b3b58765ef28f5fd20f 4084 libnet-idn-encode-perl_2.600-1.debian.tar.xz
 00b3fd487f4a0fb66d33fda5f76fe78a93c5d882 949676 libnet-idn-encode-perl_2.600-1.git.tar.xz
 3df8223d095beca11d2f90103a139a4490aa6ecd 17797 libnet-idn-encode-perl_2.600-1_source.buildinfo
Checksums-Sha256:
 06b2fa4cafa297ac706bfbd22cbfdd1cc2367cb85a86b074517793a331ad208d 2535 libnet-idn-encode-perl_2.600-1.dsc
 104f56c025ca7c914741bd860d0faee988242b9fa5043885fdf024e870df7bf3 656945 libnet-idn-encode-perl_2.600.orig.tar.gz
 48dc63e6b1e00ec27cabaf898f11807b41eb51ae877c3e9fb26db9bf7e422468 4084 libnet-idn-encode-perl_2.600-1.debian.tar.xz
 3f7f23793a89863770a45e6b9c2bf332c7fe5068e82a0a4b9e45205b7552845c 949676 libnet-idn-encode-perl_2.600-1.git.tar.xz
 199a6c8e2f774ccb8c0d95d6cdbeed873e3322f71b2e2d6bc14e504d86a31664 17797 libnet-idn-encode-perl_2.600-1_source.buildinfo
Files:
 45ae6b1facc937f5efbd704eaa40dadf 2535 perl optional libnet-idn-encode-perl_2.600-1.dsc
 a28cd955a4746958e51cc661798a5f7d 656945 perl optional libnet-idn-encode-perl_2.600.orig.tar.gz
 bd86005f02dc654399f067a3973793ef 4084 perl optional libnet-idn-encode-perl_2.600-1.debian.tar.xz
 f3fd8734197d12b8f46be6682d94df47 949676 perl None libnet-idn-encode-perl_2.600-1.git.tar.xz
 db005e6ddcba58c09dd5a3a2bee3cdc0 17797 perl optional libnet-idn-encode-perl_2.600-1_source.buildinfo
Git-Tag-Info: tag=89d99cd9f61bd9b18c286ee91859bb190062d54a fp=d1e1316e93a760a8104d85fabb3a68018649aa06
Git-Tag-Tagger: gregor herrmann <gregoa at debian.org>

-----BEGIN PGP SIGNATURE-----
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=M7PR
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20261031/106a28a8/attachment.sig>