-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 25 Jun 2014 23:01:19 +0200 Source: libemail-address-perl Binary: libemail-address-perl Architecture: source all Version: 1.895-1+deb7u1 Distribution: wheezy-security Urgency: high Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Description: libemail-address-perl - Perl module for RFC 2822 address parsing and creation Changes: libemail-address-perl (1.895-1+deb7u1) wheezy-security; urgency=high . * Team upload. * Add 0008-quoted-part-can-be-empty.patch patch. CVE-2014-0477: Fix denial of service vulnerability in the way how Email::Address::parse parses empty quoted string, as allowed by RFC 2822. * Add 0001-correct-expectation-the-phrase-looks-like-an-angle-a.patch patch. Correct expectation in testsuite where a phrase looked like an angle enclosed address. This wrong expectation causes a FTBFS if the patch for CVE-2014-0477 is applied. * Add more upstream changes to avoid slowdowns when parsing phrases Checksums-Sha1: 0458a299553026f1b400e9147e8ee1a55ec9fbf2 2201 libemail-address-perl_1.895-1+deb7u1.dsc aef751e93a150f48fc11a20eb6af7f6d801c8ef4 34306 libemail-address-perl_1.895.orig.tar.gz bc18ce9865587eb6b9362a4e1f98b1b0324b57dc 4700 libemail-address-perl_1.895-1+deb7u1.debian.tar.xz 4b6829b3a6ffb7bfd0a00e4b4afd992b22715dca 27800 libemail-address-perl_1.895-1+deb7u1_all.deb Checksums-Sha256: 109ab6d3b3b6f8f2baddcf74d457d194fce85d0bab9602fb11da315b7734bfb3 2201 libemail-address-perl_1.895-1+deb7u1.dsc 31421931c43a50ad8d658355fedcea0ff92c2794331a7000982813be0d487095 34306 libemail-address-perl_1.895.orig.tar.gz 17c0b0d8eb8a9bc2fa3bb3653d91abe338987d32b9018d1a6dde16f8582b135d 4700 libemail-address-perl_1.895-1+deb7u1.debian.tar.xz 02e7765837885a7c11a76f7d38070af254885448988fbcd85bea40353861fe6c 27800 libemail-address-perl_1.895-1+deb7u1_all.deb Files: 747b326660128539e263a6c370aee462 2201 perl optional libemail-address-perl_1.895-1+deb7u1.dsc 57a05d45498f5dc6dc28ebb075706b91 34306 perl optional libemail-address-perl_1.895.orig.tar.gz 1a1a3953d4e300d840f01d737fcdc34c 4700 perl optional libemail-address-perl_1.895-1+deb7u1.debian.tar.xz 2b88421861b3faed02ad2566c78cbe89 27800 perl optional libemail-address-perl_1.895-1+deb7u1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJTrTBXAAoJEAVMuPMTQ89EYqEP/RUWINvzVsdt176qigZXEQa0 y8y2UoN0PWBfC+PA5ofAogxlz143b9fk9H8DMLH15oiERbryzgaInRgLkVeUbAtL 4FYt32Rz3oIyuxe3wc05nrQSFA0qxOo6b6Lu2NJCtGkcEUM5vyLGx19WjcBEMP3Z HboYrPLX9fRMaSAV+JWODcqWuxyDlmGkvblpB02CrcsFVeP4+2fgKwX9vx5oHiH+ 1sLr8O4V+322QfLjgZueuv0+Je7rSe9NdwvNR+4+z6QUrFMHk7y2btrBDq38Rgbf 47PNzflBOoVKUaJy/Fhbf62cFf5wJYodKy6WLE0BoZKKyFZ+iPMkrPOBNGCNpFTD o0EywxLTUZxENnW6e9C8V3rlvoXUQUE42NGdf15yT+cJPcuGGAU6BQu0fIGDarlE ygAX2ZtBBh09UIWxDm9FOU3qjPkJH8h5akVp4corkqkzquMWI9Hs+xRKAbJvORcz g/qJ4+Ibevyx7cKPt6KBVSjiSy/I9jqzk/N/ak989mrCVrCN0ckr95dEdKRKyMId 7NpSUM/e8h0CmAJkKnKLvprvcyMuCABaUs/t/5SZT9ULhRwwAQVUSYo91WpholyC wsdkIrxNLAWxZ5g+aZd9Xy6nYH7jAGRl9vwZHtrvwzJ+LdkYUMzhtWG2Cs5D82uD B6a+ePlCVdVCjfTz4mKk =aAiU -----END PGP SIGNATURE-----