<html><head></head><body><div><p style="margin-top:0;margin-bottom:10px;">Hello!</p><p style="margin-top:0;margin-bottom:10px;">INC1299099 (Query regarding ruby-mail's recent DoS report) has been updated.</p><p style="margin-top:0;margin-bottom:10px;">Opened for: Yadnyawalk Tale<br>Followers: mikel@reinteractive.net, jeremydaer@gmail.com, pkg-ruby-extras-maintainers@lists.alioth.debian.org</p></div>
<p style="margin-top: 10px; margin-bottom: 10px;">A Guest updated your request with the following comments:</p>
<div style="padding: 10px 0 10px 10px; background-color: ivory;"><div>Reply from: jeremydaer@gmail.com</div><div> </div><div>Hi Yadnyawalk,</div><div> </div><div>No update as of yet. I wasn't aware of the public report. Thanks</div><div>for letting me know.</div><div> </div><div>Re. CVE, agreed; will do.</div><div> </div><div>Thanks,</div><div>Jeremy</div><div> </div><div>On Mon, May 18, 2020 at 3:14 AM Yadnyawalk Tale wrote:</div><div> </div><div>> Hello there,</div><div>></div><div>> I work for Red Hat Product Security team, and was wondering if you have an</div><div>> update on the public report of ruby-mail DoS. Does anyone know if fixes are</div><div>> merged and ruby-mail requested a CVE?</div><div>> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960064</div><div>></div><div>> We feel this should have a CVE given due to its potential impact if this</div><div>> turns</div><div>> out to be a valid flaw. Red Hat is also a CVE Numbering Authority (CNA)</div><div>> but as</div><div>> a precedent, ruby-mail should request a CVE to CNA.</div><div>></div><div>> Please let us know.</div><div>></div><div>> --</div><div>> Yadnyawalk Tale / Red Hat Product Security</div><div>> 1376 736C 0705 3DD9 098C 561C 83F3 543F D303 F537</div><div>></div></div>
<div><p style="margin-top:20px;margin-bottom:10px;"><strong>How can I track and update my request?</strong></p><p style="margin-top:0;margin-bottom:10px;">To respond, reply to this email. You may also create a new email and include the request number (INC1299099) in the subject.</p></div>
<p style="margin-top: 14px; margin-bottom: 0;">Thank you,<br>Product Security</p><div> </div><div style="display:inline">Ref:MSG31233137</div></body></html>