libnet-cidr-lite-perl (0.21-1ubuntu0.18.04.1~esm2) bionic-security; urgency=medium

  * SECURITY UPDATE: ACL bypass via find()
    - debian/patches/CVE-2026-45190.patch: Reject Unicode digits and trailing
      newlines in parsers in Lite.pm
    - debian/patches/CVE-2026-45191.patch: Reject zero-padded CIDR masks in
      Lite.pm
    - CVE-2026-45190
    - CVE-2026-45191

 -- Kyle Kernick <kyle.kernick@canonical.com>  Wed, 17 Jun 2026 13:36:19 -0600

libnet-cidr-lite-perl (0.21-1ubuntu0.18.04.1~esm1) bionic-security; urgency=medium

  * SECURITY UPDATE: Network security bypass in pack_ipv4.
    - debian/patches/CVE-2021-47154.patch: Ensure leading zeros are stripped
      from octal IPv4 addresses in Lite.pm.
    - CVE-2021-47154
  * SECURITY UPDATE: IP ACL Bypass via find()
    - debian/patches/CVE-2026-40198.patch: Reject uncompressed IPv6 addresses
      with fewer than 8 groups in Lite.pm
    - debian/patches/CVE-2026-40199.patch: Do not include sentinel byte when
      packing IPv4 mapped addresses in Lite.pm
    - CVE-2026-40198
    - CVE-2026-40199

 -- Kyle Kernick <kyle.kernick@canonical.com>  Fri, 05 Jun 2026 09:58:37 -0600

libnet-cidr-lite-perl (0.21-1) unstable; urgency=low

  [ gregor herrmann ]
  * debian/control: Changed: Switched Vcs-Browser field to ViewSVN
    (source stanza).

  [ Nathan Handler ]
  * debian/watch: Update to ignore development releases.

  [ gregor herrmann ]
  * Change my email address.

  [ Chris Butler ]
  * New upstream release
  * Add myself to uploaders
  * Refreshed debian/ directory
  * Set Standards-Version to 3.8.4 (no changes required after the refresh)
  * Switch to source format 3.0 (quilt)
  * Changed short description to be a noun phrase, added module name in long
    description

 -- Chris Butler <chrisb@debian.org>  Sun, 28 Mar 2010 17:59:07 +0100

libnet-cidr-lite-perl (0.20-2) unstable; urgency=low

  [ Stephen Gran ]
  * Lowered debhelper compatibility level to 5 (Be kind to backporters day)

  [ gregor herrmann ]
  * debian/control: Added: Vcs-Svn field (source stanza); Vcs-Browser
    field (source stanza); Homepage field (source stanza). Removed: XS-
    Vcs-Svn fields.
  * debian/watch: use dist-based URL.
  * debian/rules: delete /usr/lib/perl5 only if it exists (closes: #467799).
  * Set Standards-Version to 3.7.3 (no changes).
  * Set debhelper compatibility level to 6.
  * debian/watch: use extended regexp for matching upstream releases.
  * debian/copyright: add upstream source location, convert to new format.
  * debian/rules: update with the help of dh-make-perl's templates; don't
    install README anymore (contains only installation instructions and
    copyright).
  * Add libtest-pod-perl and libtest-pod-coverage-perl to build dependencies
    in order to enable additional tests.
  * Add /me to Uploaders.

 -- gregor herrmann <gregor+debian@comodo.priv.at>  Sat, 01 Mar 2008 21:41:15 +0100

libnet-cidr-lite-perl (0.20-1) unstable; urgency=low

  * New upstream release. (Closes: #329599)
  * Adopted for the Debian Perl Group. (Closes: #357086)
  * Upgrade to Standards-Version 3.6.2. No changes needed.
  * Don't ignore the result of 'make realclean'.
  * Add debian/watch.
  * Run 'make test' at build time.
  * Don't install an empty /usr/lib/perl5/ directory.

 -- Niko Tyni <ntyni@iki.fi>  Sat, 18 Mar 2006 00:33:32 +0200

libnet-cidr-lite-perl (0.15-1) unstable; urgency=low

  * Initial Release.

 -- Chip Salzenberg <chip@debian.org>  Wed,  4 Feb 2004 11:53:44 -0500

