Debian alert DLA-4761-1 (libnet-dns-perl)

From:
             
 
Guilhem Moulin <guilhem@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4761-1] libnet-dns-perl security update
Date:
             
 
Sun, 30 Aug 2026 20:41:05 +0200
Message-ID:
             
 
<apR5QfJRbYUbn8K0@debian.org>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4761-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                       Guilhem Moulin
August 30, 2026                               https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : libnet-dns-perl
Version        : 1.29-1+deb11u1 1.36-1+deb12u1
CVE ID         : CVE-2026-64194
Debian Bug     : 1142503

Steffen Ullrich discovered that libnet-dns-perl, a Perl module to
perform DNS queries, was vulnerable to Denial of Service via deep
RFC 1035 compression pointer chains.

For Debian 11 bullseye, this problem has been fixed in version
1.29-1+deb11u1.

For Debian 12 bookworm, this problem has been fixed in version
1.36-1+deb12u1.

We recommend that you upgrade your libnet-dns-perl packages.

For the detailed security status of libnet-dns-perl please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libnet-dns-perl

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=S/TT
-----END PGP SIGNATURE-----