Bug#887547: libperl-critic-perl depends on libemail-address-perl

Pali Rohár pali.rohar at gmail.com
Wed Jan 17 20:01:28 UTC 2018


Package: libperl-critic-perl
Version: 1.130-1
Severity: wishlist

Hi! Package libperl-critic-perl depends on libemail-address-perl which is
vulnerable to CVE-2015-7686, see bug #868170. libemail-address-perl
provides perl module Email::Address which is now unmaintained. There is
a new perl module Email::Address::XS which is API compatible replacement
for Email::Address and is available in libemail-address-xs-perl. Please
port libperl-critic-perl package to use libemail-address-xs-perl. If you need
help with porting let me know.

-- 
Pali Rohár
pali.rohar at gmail.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-perl-maintainers/attachments/20180117/817f2643/attachment.sig>


More information about the pkg-perl-maintainers mailing list