Skip to content
Multiple CVEs in perl-Net-IDN-Encode Fixed in Fedora Updates

Multiple CVEs in perl-Net-IDN-Encode Fixed in Fedora Updates

First seen 10 Nov 2026, 08:13 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 10, 2026 at 08:14 UTC
  • •Fedora updates perl-Net-IDN-Encode to version 2.600 to fix multiple CVEs.
  • •Critical vulnerabilities include CVE-2026-87078 and CVE-2026-87080, with CVSS scores up to 9.1.
  • •Users should apply the update promptly to mitigate potential risks.

On November 10, 2026, Fedora released updates for the perl-Net-IDN-Encode module to address multiple vulnerabilities. The updates fix several critical and high-severity CVEs, including CVE-2026-87078 and CVE-2026-87080, which involve memory leaks and heap use-after-free issues. These vulnerabilities affect systems using the perl-Net-IDN-Encode module, which is utilized for encoding Internationalized Domain Names (IDNs). The CVEs were published on September 22, 2026, and have a CVSS score ranging from 6.5 to 9.1, indicating varying levels of severity. Users are advised to update their systems to version 2.600 to mitigate these risks. The updates can be installed using the 'dnf' package manager. As of now, there are no reports of in the wild.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 8h ago How this analysis works

Timeline

2026-09-22
CVE-2026-74766 published
Multiple vulnerabilities in perl-Net-IDN-Encode were disclosed, affecting encoding of Internationalized Domain Names.
Linuxsecurity
2026-09-22
CVE-2026-87078 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-22
CVE-2026-87080 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-11-10
Fedora releases updates
Fedora released version 2.600 of perl-Net-IDN-Encode to address multiple CVEs, urging users to update.
Linuxsecurity

More articles in this cluster (4)

Following this threat?

Track Fedora and CVE-2026-74765 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (11)

1 / 3

Common questions

What are the main vulnerabilities fixed?
The update addresses multiple CVEs, including CVE-2026-87078 (memory leaks) and CVE-2026-87080 (truncated label handling).
How urgent is the update?
While there are no reports of active exploitation, applying the update is recommended to prevent potential vulnerabilities.
How can I apply the update?
Users can install the update using the 'dnf upgrade --advisory FEDORA-2026-3cb8ce0117' command.