UbuntuUpdates.org

Package "python-idna"

Name: python-idna

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Python IDNA2008 (RFC 5891) handling (Python 3)
Latest version: 3.11-1ubuntu0.1
Release: resolute (26.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "python-idna" in Resolute

Repository Area Version
base main 3.11-1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 3.11-1ubuntu0.1 2026-07-15 15:31:43 UTC

  python-idna (3.11-1ubuntu0.1) resolute-security; urgency=medium

  * SECURITY UPDATE: DoS via specially crafted inputs to idna.encode()
    - debian/patches/CVE-2026-45409-1.patch: Reject oversized inputs up-front in
      idna/core.py, tests/test_idna.py.
    - debian/patches/CVE-2026-45409-2.patch: Use valid_string_length() for early
      oversized-input check in idna/core.py.
    - debian/patches/CVE-2026-45409-3.patch: Enforce early length limits in
      check_label in idna/core.py, tests/test_idna.py.
    - CVE-2026-45409

 -- Marc Deslauriers <email address hidden> Tue, 14 Jul 2026 13:17:09 -0400
CVE-2026-45409 Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unico


About   -   Send Feedback to @ubuntu_updates