Add patch CVE-2026-45409.patch to enforce early length limits in
encode(), decode(), and check_label() so that CONTEXTO-heavy
inputs cannot drive per-codepoint validation into quadratic
time. The patch also adapts the upstream test to work with the
v2.5 codec API by using idna.codec.IncrementalEncoder directly
instead of codecs.getincrementalencoder("idna2008").
CVE: CVE-2026-45409
Upstream patches:
- c0dda4501d.patch
- e1cb465b63.patch
Resolves: RHEL-215650
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
Co-authored-by: Tomáš Hrnčiar <thrnciar@redhat.com>
