gregor herrmann <gre...@debian.org> wrote:
> On Sun, 10 May 2020 02:25:42 +0000, perl email user wrote:
> 
> > It's possible to easily craft a message which triggers
> > out-of-memory error.
> > 
> > Upstream has been notified and working on the issue.
> 
> Mhm. Not a lot of information in this bug report :)

Sorry, I didn't want to provide info that could be used to
aid attackers.

Upstream and secur...@debian.org are aware of the problem
but have not yet acted.

If you have access to secur...@debian.org archives, see
<20201025102450.byceuhbphom4gnkj@pali> for fix + discussion.

> Anyway, 1.024-1 has been uploaded. Do you happen to know if this
> changes anything?

Nope.  Fwiw, I'm burned out from life + pandemic and
p...@cpan.org has been trying to work with upstream on this.

Anyways thanks for your response and all you do for Debian!

Reply via email to