Advisories » MGASA-2026-0511

Updated perl-Net-Whois-Raw package fixes a security vulnerability

Publication date: 17 Oct 2026
Modification date: 17 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-19954

Description

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois
command-line tool that queries WHOIS for the wrong domain for unicode
domain names. (CVE-2026-19954)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36461
• https://www.openwall.com/lists/oss-security/2026/10/05/9
• https://metacpan.org/release/NALOBIN/Net-Whois-Raw-2.99044/changes
• https://github.com/regru/Net-Whois-Raw/issues/34
• https://metacpan.org/release/PJCJ/Net-IDN-Encode-2.590-TRIAL/view/lib/Net/IDN/Punycode.pm#WARNING
• https://www.rfc-editor.org/rfc/rfc5891#section-5.2
• https://www.cve.org/CVERecord?id=CVE-2026-19954

SRPMS

10/core

• perl-Net-Whois-Raw-2.990.420-1.1.mga10