Re: CVE-2018-12558: DOS in perl module Email::Address

2018-06-20 Thread Rob McEwen
On 6/20/2018 1:30 PM, Bill Cole wrote: http://www.openwall.com/lists/oss-security/2018/06/19/3 SpamAssassin does not use Email::Address. Thanks, Bill, for clarifying that. I've been concerned about this for hours - but too busy today research it myself. -- Rob McEwen

Re: CVE-2018-12558: DOS in perl module Email::Address

2018-06-20 Thread Bill Cole
On 20 Jun 2018, at 11:11, Ian Zimmerman wrote: > This is probably of interest to readers of this list. Only very tangentially. > http://www.openwall.com/lists/oss-security/2018/06/19/3 SpamAssassin does not use Email::Address.

Fwd: CVE-2018-12558: DOS in perl module Email::Address

2018-06-20 Thread Ian Zimmerman
This is probably of interest to readers of this list. http://www.openwall.com/lists/oss-security/2018/06/19/3 -- Please don't Cc: me privately on mailing lists and Usenet, if you also post the followup to the list or newsgroup. To reply privately _only_ on Usenet and on broken lists which