Описание
Security update for perl-Email-Address
This update for perl-Email-Address to version 1.912 fixes the following issue:
Security issue fixed:
- CVE-2018-12558: Fixed a vulnerability which could allow Denial of Service in perl module Email::Address (bsc#1098368).
Список пакетов
SUSE Package Hub 15
perl-Email-Address-1.912-bp150.3.3.1
openSUSE Leap 15.0
perl-Email-Address-1.912-bp150.3.3.1
Ссылки
- E-Mail link for openSUSE-SU-2019:1114-1
- SUSE Security Ratings
- SUSE Bug 1098368
- SUSE CVE CVE-2018-12558 page
Описание
The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters ("\f").
Затронутые продукты
SUSE Package Hub 15:perl-Email-Address-1.912-bp150.3.3.1
openSUSE Leap 15.0:perl-Email-Address-1.912-bp150.3.3.1
Ссылки
- CVE-2018-12558
- SUSE Bug 1098368