Package: license-reconcile Version: 0.14 Severity: wishlist Hi! Package license-reconcile depends on libemail-address-perl which is vulnerable to CVE-2015-7686, see bug #868170. libemail-address-perl provides perl module Email::Address which is now unmaintained. There is a new perl module Email::Address::XS which is API compatible replacement for Email::Address and is available in libemail-address-xs-perl. Please port license-reconcile package to use libemail-address-xs-perl. If you need help with porting let me know.
-- Pali Rohár pali.ro...@gmail.com
signature.asc
Description: PGP signature
