Advisories » MGASA-2016-0397

Updated perl-Email-Address packages fix security vulnerability

Publication date: 25 Nov 2016
Modification date: 25 Nov 2016
Type: security
Affected Mageia releases : 5
CVE: CVE-2015-7686

Description

Pali Rohár discovered a possible DoS attack in any software which uses the
Email::Address Perl module for parsing string input to a list of email
addresses.

Note that this issue has only been partially mitigated in Email::Address
itself.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=16862
• http://openwall.com/lists/oss-security/2015/09/27/1
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7686

SRPMS

5/core

• perl-Email-Address-1.908.0-1.mga5