Debian Security Advisory

DLA-2101-1 libemail-address-list-perl -- LTS security update

Date Reported:
12 Feb 2020
Affected Packages:
libemail-address-list-perl
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2018-18898.
More information:

An denial of service via an algorithmic complexity attack on email address parsing have been identified in libemail-address-list-perl.

For Debian 8 Jessie, this problem has been fixed in version 0.05-1+deb8u1.

We recommend that you upgrade your libemail-address-list-perl packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS

--u3/rZRmxL6MmkK24 Content-Type: application/pgp-signature; name="signature.asc"