Headline
CVE-2018-18898: [SECURITY] Fedora 28 Update: perl-Email-Address-List-0.06-1.fc28 - package-announce
The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing.
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2019-ef5551fcff 2019-02-13 06:14:17.450111 -------------------------------------------------------------------------------- Name : perl-Email-Address-List Product : Fedora 28 Version : 0.06 Release : 1.fc28 URL : https://metacpan.org/release/Email-Address-List Summary : RFC close address list parsing Description : Parser for From, To, Cc, Bcc, Reply-To, Sender and previous prefixed with Resent- (e.g. Resent-From) headers. -------------------------------------------------------------------------------- Update Information: Upstream bugfix. CVE-2018-18898 -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 31 2019 Ralf Cors��pius <corsepiu(a)fedoraproject.org> - 0.06-1 - Update to 0.06. - Modernize spec. - Reflect Source0-URL having changed. -------------------------------------------------------------------------------- This update can be installed with the “dnf” update program. Use su -c ‘dnf upgrade --advisory FEDORA-2019-ef5551fcff’ at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------