Debian Patches
Status for dnspython/2.8.0-7
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| 0001-fix-testInvalidDigestLengthCDS0-for-3.15.patch | fix testInvalidDigestLengthCDS0 for 3.15 | Bob Halley <halley@dnspython.org> | no | 2026-04-12 | ||
| 0002-IDNA-2008-transitional-is-even-more-deprecated-in-id.patch | IDNA 2008 transitional is even more deprecated in idna 3.19; remove tests | Bob Halley <halley@dnspython.org> | no | 2026-08-20 | ||
| 0003-Limit-decompression-to-a-chain-length-of-at-most-16-.patch | Limit decompression to a chain length of at most 16 pointers. A maliciously crafted DNS message may cause dns.name.from_wire_parser() to use excessive CPU for DNS name decompression. Applications which process untrusted DNS wire form messages with dnspython may be degraded or DoS'd by the extra CPU use required (CVE-2026-114605, GHSA-45c3-73f7-pv4m). . Credit: Evgenios Gkritsis, Constantinos Patsakis and George Stergiopoulos. =================================================================== |
Bob Halley <halley@dnspython.org> | yes | debian upstream | upstream, https://github.com/rthalley/dnspython/commit/b485e460c266540a1a09ca6d8d1d7b685b1d3023 | 2026-10-24 |