Dear all,
We have a candidate for the upcoming 1.56 release of Net::DNS.
This candidate has one regular bugfixes, and two fixes for LLM discovered security issues:
- Fix the backtick removal fix from 1.55 (See RT#179692)
- Fix of remote execution injection via EDNS EXTENDED ERROR (See RT#179945)
- Fix of denial of service via long DNS compression chains (See RT#179946)
Please review the candidate carefully. If no issues arise, the actual releases will follow Saturday the 18th of June 2026.
See also the Changes.
| link | https://www.net-dns.org/download/Net-DNS-1.55_01.tar.gz |
| sha256 | eca7ef258d654446d6fb0aa848a409e33de9595a3b94a88f0a0c066b6390c855 |
| asc | https://www.net-dns.org/download/Net-DNS-1.55_01.tar.gz.asc |
Regression test results will follow coming Monday the 13th of July
Changes
**** 1.56 [unreleased]
Fix rt.cpan.org #179946
Denial of Service via long DNS compression chains
Fix rt.cpan.org #179945
Remote code injection via EDNS EXTENDED ERROR
Fix rt.cpan.org #179692/#176900
UNIX.pm: Unreachable code warning using Apache/mod_perl