libnet-cidr-lite-perl (0.22-2ubuntu0.25.10.2) questing-security; urgency=medium

  * SECURITY UPDATE: ACL bypass via find()
    - debian/patches/CVE-2026-45190.patch: Reject Unicode digits and trailing
      newlines in parsers in Lite.pm
    - debian/patches/CVE-2026-45191.patch: Reject zero-padded CIDR masks in
      Lite.pm
    - CVE-2026-45190
    - CVE-2026-45191

 -- Kyle Kernick <kyle.kernick@canonical.com>  Wed, 17 Jun 2026 13:28:46 -0600

libnet-cidr-lite-perl (0.22-2ubuntu0.25.10.1) questing-security; urgency=medium

  * SECURITY UPDATE: IP ACL Bypass via find()
    - debian/patches/CVE-2026-40198.patch: Reject uncompressed IPv6 addresses
      with fewer than 8 groups in Lite.pm
    - debian/patches/CVE-2026-40199.patch: Do not include sentinel byte when
      packing IPv4 mapped addresses in Lite.pm
    - CVE-2026-40198
    - CVE-2026-40199

 -- Kyle Kernick <kyle.kernick@canonical.com>  Fri, 05 Jun 2026 10:02:46 -0600

libnet-cidr-lite-perl (0.22-2) unstable; urgency=medium

  [ Debian Janitor ]
  * Update standards version to 4.6.1, no changes needed.
  * Apply multi-arch hints. + libnet-cidr-lite-perl: Add Multi-Arch: foreign.

 -- Jelmer Vernooĳ <jelmer@debian.org>  Sat, 19 Nov 2022 14:11:56 +0000

libnet-cidr-lite-perl (0.22-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Bump debhelper from old 11 to 12.
  * Set debhelper-compat version in Build-Depends.

  [ gregor herrmann ]
  * debian/watch: use uscan version 4.
  * Import upstream version 0.22.
    Security: IPv4 octets with leading zeroes are no longer allowed.
    https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/
  * Update Upstream-Contact in debian/copyright.
  * Update years of packaging copyright.
  * Declare compliance with Debian Policy 4.5.1.
  * Set Rules-Requires-Root: no.
  * Annotate test-only build dependencies with <!nocheck>.
  * Bump debhelper-compat to 13.

 -- gregor herrmann <gregoa@debian.org>  Sun, 11 Apr 2021 01:25:09 +0200

libnet-cidr-lite-perl (0.21-2.1) unstable; urgency=medium

  * Non maintainer upload by the Reproducible Builds team.
  * No source change upload to rebuild on buildd with .buildinfo files.

 -- Holger Levsen <holger@debian.org>  Fri, 01 Jan 2021 15:59:32 +0100

libnet-cidr-lite-perl (0.21-2) unstable; urgency=medium

  * Team upload

  [ Ansgar Burchardt ]
  * debian/control: Convert Vcs-* fields to Git.

  [ Salvatore Bonaccorso ]
  * debian/copyright: Replace DEP5 Format-Specification URL from
    svn.debian.org to anonscm.debian.org URL.
  * Change Vcs-Git to canonical URI (git://anonscm.debian.org)
  * Change search.cpan.org based URIs to metacpan.org based URIs

  [ Axel Beckert ]
  * debian/copyright: migrate pre-1.0 format to 1.0 using "cme fix dpkg-
    copyright"

  [ gregor herrmann ]
  * Strip trailing slash from metacpan URLs.

  [ Salvatore Bonaccorso ]
  * Update Vcs-Browser URL to cgit web frontend
  * debian/control: Use HTTPS transport protocol for Vcs-Git URI

  [ gregor herrmann ]
  * debian/copyright: change Copyright-Format 1.0 URL to HTTPS.
  * Remove Chris Butler from Uploaders. Thanks for your work!

  [ Salvatore Bonaccorso ]
  * Update Vcs-* headers for switch to salsa.debian.org

  [ Florian Schlichting ]
  * Fix copyright-format syntax
  * Update license paragraphs to commonly used versions
  * Bump dh compat to level 11
  * Declare compliance with Debian Policy 4.1.5

 -- Florian Schlichting <fsfs@debian.org>  Fri, 06 Jul 2018 21:42:35 +0200

libnet-cidr-lite-perl (0.21-1) unstable; urgency=low

  [ gregor herrmann ]
  * debian/control: Changed: Switched Vcs-Browser field to ViewSVN
    (source stanza).

  [ Nathan Handler ]
  * debian/watch: Update to ignore development releases.

  [ gregor herrmann ]
  * Change my email address.

  [ Chris Butler ]
  * New upstream release
  * Add myself to uploaders
  * Refreshed debian/ directory
  * Set Standards-Version to 3.8.4 (no changes required after the refresh)
  * Switch to source format 3.0 (quilt)
  * Changed short description to be a noun phrase, added module name in long
    description

 -- Chris Butler <chrisb@debian.org>  Sun, 28 Mar 2010 17:59:07 +0100

libnet-cidr-lite-perl (0.20-2) unstable; urgency=low

  [ Stephen Gran ]
  * Lowered debhelper compatibility level to 5 (Be kind to backporters day)

  [ gregor herrmann ]
  * debian/control: Added: Vcs-Svn field (source stanza); Vcs-Browser
    field (source stanza); Homepage field (source stanza). Removed: XS-
    Vcs-Svn fields.
  * debian/watch: use dist-based URL.
  * debian/rules: delete /usr/lib/perl5 only if it exists (closes: #467799).
  * Set Standards-Version to 3.7.3 (no changes).
  * Set debhelper compatibility level to 6.
  * debian/watch: use extended regexp for matching upstream releases.
  * debian/copyright: add upstream source location, convert to new format.
  * debian/rules: update with the help of dh-make-perl's templates; don't
    install README anymore (contains only installation instructions and
    copyright).
  * Add libtest-pod-perl and libtest-pod-coverage-perl to build dependencies
    in order to enable additional tests.
  * Add /me to Uploaders.

 -- gregor herrmann <gregor+debian@comodo.priv.at>  Sat, 01 Mar 2008 21:41:15 +0100

libnet-cidr-lite-perl (0.20-1) unstable; urgency=low

  * New upstream release. (Closes: #329599)
  * Adopted for the Debian Perl Group. (Closes: #357086)
  * Upgrade to Standards-Version 3.6.2. No changes needed.
  * Don't ignore the result of 'make realclean'.
  * Add debian/watch.
  * Run 'make test' at build time.
  * Don't install an empty /usr/lib/perl5/ directory.

 -- Niko Tyni <ntyni@iki.fi>  Sat, 18 Mar 2006 00:33:32 +0200

libnet-cidr-lite-perl (0.15-1) unstable; urgency=low

  * Initial Release.

 -- Chip Salzenberg <chip@debian.org>  Wed,  4 Feb 2004 11:53:44 -0500
