mirror of
https://github.com/xcat2/xcat-dep.git
synced 2026-10-18 01:30:32 +00:00
94f00b233a
openeuler-24.03-ppc64le ships the openEuler GA rpm perl-Net-DNS-1.40. That release has CVE-2026-64193 (EDNS EXTENDED-ERROR code injection) and CVE-2026-64194 (unbounded compression-pointer chains). Net::DNS 1.56 fixes both. The test now reads the release each target ships: the version of the pinned publisher rpm, or else the version the spec builds. It fails when that release is below 1.56. It fails on openeuler-24.03-ppc64le until that target builds Net::DNS from the xcat-dep spec. Signed-off-by: Daniel Hilst <392820+dhilst@users.noreply.github.com>