https://bugzilla.redhat.com/show_bug.cgi?id=2305915
Bug ID: 2305915
Summary: CVE-2024-23185 perl-Email-Address-XS: very large
headers can cause resource exhaustion when parsing
message [epel-all]
Product: Fedora EPEL
Version: epel8
Status: NEW
Whiteboard: {"flaws": ["3477a34a-f4c8-488a-a933-f8ea1c702a4e"]}
Component: perl-Email-Address-XS
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: jplesnik(a)redhat.com
Reporter: mbenatto(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: jplesnik(a)redhat.com,
perl-devel(a)lists.fedoraproject.org
Blocks: 2305910 (CVE-2024-23185)
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
https://bugzilla.redhat.com/show_bug.cgi?id=2305910
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2305910
[Bug 2305910] CVE-2024-23185 dovecot: very large headers can cause resource
exhaustion when parsing message
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2305915
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…
https://bugzilla.redhat.com/show_bug.cgi?id=2269568
Bug ID: 2269568
Summary: CVE-2024-2467 perl-Crypt-OpenSSL-RSA: side-channel
attack in PKCS#1 v1.5 padding mode (Marvin Attack)
[fedora-all]
Product: Fedora
Version: 39
Status: NEW
Component: perl-Crypt-OpenSSL-RSA
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: wjhns174(a)hardakers.net
Reporter: mcascell(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
wjhns174(a)hardakers.net
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2269567
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2269568
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…