-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Oct 2026 14:34:30 +0200
Source: dnspython
Architecture: source
Version: 2.7.0-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1151842
Changes:
 dnspython (2.7.0-1+deb13u1) trixie; urgency=medium
 .
   * Backport upstream fix for CVE-2026-114605: limit DNS compression
     pointer chains to 16 hops to prevent excessive CPU use (denial of
     service) when parsing untrusted wire-format messages
     (Closes: #1151842):
     - 0001-Limit-decompression-to-a-chain-length-of-at-most-16-.patch
Checksums-Sha1:
 897673838e2c8070cbeb170767da47bec5c26b12 2519 dnspython_2.7.0-1+deb13u1.dsc
 85b7ff0f412f61f68ad20b85977a5698bddee40f 8324 dnspython_2.7.0-1+deb13u1.debian.tar.xz
 f18ea5c2cf08340109612a9805443e4acede25c7 7909 dnspython_2.7.0-1+deb13u1_amd64.buildinfo
Checksums-Sha256:
 9612e257b84d83f9cc850d41cc61a70b9a5629f9aaab99f84bf02e8f175f4038 2519 dnspython_2.7.0-1+deb13u1.dsc
 7aafbaeb402d244d01ab9089d79a58adb383994445dca965c555c2b8c9fc02a0 8324 dnspython_2.7.0-1+deb13u1.debian.tar.xz
 2755fffb3da4ddd53bb321815de7f9f417419e2482fb9ed7b400e3892205f366 7909 dnspython_2.7.0-1+deb13u1_amd64.buildinfo
Files:
 f173c0b81f9ff4a1913a363b4499de0f 2519 python optional dnspython_2.7.0-1+deb13u1.dsc
 7aaff79728e2da8f6a8bafc81f3da42d 8324 python optional dnspython_2.7.0-1+deb13u1.debian.tar.xz
 60c80ef2fc719074e315b4ce72fce5bf 7909 python optional dnspython_2.7.0-1+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=M8oJ
-----END PGP SIGNATURE-----