<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Dear all,</p>
<p>We have a candidate for the upcoming 1.56 release of <a class="moz-txt-link-freetext" href="Net::DNS">Net::DNS</a>.</p>
<p>This candidate has one regular bugfixes, and two fixes for LLM
discovered security issues:</p>
<ul>
<li>Fix the backtick removal fix from 1.55 (See <a
href="https://rt.cpan.org/Ticket/Display.html?id=179692">RT#179692</a>)</li>
<li>Fix of remote execution injection via EDNS EXTENDED ERROR (See
<a href="https://rt.cpan.org/Ticket/Display.html?id=179945">RT#179945</a>)</li>
<li>Fix of denial of service via long DNS compression chains (See
<a href="https://rt.cpan.org/Ticket/Display.html?id=179946">RT#179946</a>)</li>
</ul>
<p>Please review the candidate carefully. If no issues arise, the
actual releases will follow Saturday the 18th of June 2026.</p>
<div class="md-table fullscreen-table-wrapper --editable"
data-table-index="0">
<div class="fullscreen-table-wrapper__buttons"></div>
<table>
<thead>
<tr>
<th><br>
</th>
<th><br>
</th>
</tr>
</thead>
<tbody>
<tr>
<td>link</td>
<td><a
href="https://www.net-dns.org/download/Net-DNS-1.55_01.tar.gz"
class="moz-txt-link-freetext">https://www.net-dns.org/download/Net-DNS-1.55_01.tar.gz</a></td>
</tr>
<tr>
<td>sha256</td>
<td>eca7ef258d654446d6fb0aa848a409e33de9595a3b94a88f0a0c066b6390c855</td>
</tr>
<tr>
<td>asc</td>
<td><a
href="https://www.net-dns.org/download/Net-DNS-1.55_01.tar.gz.asc"
class="moz-txt-link-freetext">https://www.net-dns.org/download/Net-DNS-1.55_01.tar.gz.asc</a></td>
</tr>
</tbody>
</table>
</div>
<p>Regression test results will follow coming Monday the 13th of
July</p>
<h3>Changes</h3>
<pre class="codeblock-buttons"><div class="codeblock-button-wrapper"
style="right: 0px;"></div><code class="hljs language-csharp"
data-highlighted="yes">**** <span class="hljs-number">1.56</span> [unreleased]
Fix rt.cpan.org <span class="hljs-meta">#179946</span>
Denial of Service via <span class="hljs-built_in">long</span> DNS compression chains
Fix rt.cpan.org <span class="hljs-meta">#179945</span>
Remote code injection via EDNS EXTENDED ERROR
Fix rt.cpan.org <span class="hljs-meta">#179692/#176900</span>
UNIX.pm: Unreachable code warning <span class="hljs-keyword">using</span> Apache/mod_perl
</code></pre>
<p><br>
</p>
</body>
</html>