[request-tracker-maintainers] Bug#887551: request-tracker4 depends on libemail-address-perl

Pali Rohár pali.rohar at gmail.com
Wed Jan 17 20:05:18 UTC 2018


Package: request-tracker4
Version: 4.4.2-1
Severity: wishlist

Hi! Package request-tracker4 depends on libemail-address-perl which is
vulnerable to CVE-2015-7686, see bug #868170. libemail-address-perl
provides perl module Email::Address which is now unmaintained. There is
a new perl module Email::Address::XS which is API compatible replacement
for Email::Address and is available in libemail-address-xs-perl. Please
port request-tracker4 package to use libemail-address-xs-perl. If you need
help with porting let me know.

-- 
Pali Rohár
pali.rohar at gmail.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-request-tracker-maintainers/attachments/20180117/0766faaf/attachment.sig>


More information about the pkg-request-tracker-maintainers mailing list