Bug#887544: libemail-reply-perl depends on libemail-address-perl

2018-05-20 Thread Pali Rohár
I sent patch which fixes this problem to upstream project 3 months ago: https://github.com/Perl-Email-Project/Email-Reply/pull/6 -- Pali Rohár pali.ro...@gmail.com signature.asc Description: PGP signature

Bug#887544: libemail-reply-perl depends on libemail-address-perl

2018-01-17 Thread Pali Rohár
Package: libemail-reply-perl Version: 1.204-1 Severity: wishlist Hi! Package libemail-reply-perl depends on libemail-address-perl which is vulnerable to CVE-2015-7686, see bug #868170. libemail-address-perl provides perl module Email::Address which is now unmaintained. There is a new perl module