#47624 Various IP handling perl packages may be vulnerable

Received: (at submit) by debbugs.gnu.org; 6 Apr 2021 19:05:41 +0000
From debbugs-submit-bounces@debbugs.gnu.org Tue Apr 06 15:05:41 2021
Received: from localhost ([127.0.0.1]:41774 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1lTr1A-000828-UA
	for submit@debbugs.gnu.org; Tue, 06 Apr 2021 15:05:41 -0400
Received: from lists.gnu.org ([209.51.188.17]:53212)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <lle-bout@zaclys.net>) id 1lTr18-000820-S8
 for submit@debbugs.gnu.org; Tue, 06 Apr 2021 15:05:39 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:39484)
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <lle-bout@zaclys.net>)
 id 1lTr18-0001cR-Kx
 for bug-guix@gnu.org; Tue, 06 Apr 2021 15:05:38 -0400
Received: from mail.zaclys.net ([178.33.93.72]:33899)
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <lle-bout@zaclys.net>)
 id 1lTr16-0003cK-08
 for bug-guix@gnu.org; Tue, 06 Apr 2021 15:05:38 -0400
Received: from guix-xps.local (lsl43-1_migr-78-195-19-20.fbx.proxad.net
 [78.195.19.20] (may be forged)) (authenticated bits=0)
 by mail.zaclys.net (8.14.7/8.14.7) with ESMTP id 136J5Xnb039122
 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO)
 for <bug-guix@gnu.org>; Tue, 6 Apr 2021 21:05:33 +0200
DMARC-Filter: OpenDMARC Filter v1.3.2 mail.zaclys.net 136J5Xnb039122
Authentication-Results: mail.zaclys.net;
 dmarc=fail (p=reject dis=none) header.from=zaclys.net
Authentication-Results: mail.zaclys.net;
 spf=fail smtp.mailfrom=lle-bout@zaclys.net
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zaclys.net;
 s=default; t=1617735933;
 bh=PlU/q0+JKvgr9uVjOzwehOX1UUVhYLyj9cL1/rzJtK8=;
 h=Subject:From:To:Date:From;
 b=YTAWNmaeAVlDFKR1RihXyJRUymrve0c7HNBdEYKjciKjT28RVJdbo1N7iL2izBCtD
 VVgsM2rEmpBAfYFinarhLn2q8QQne8xUXIcXvHW11KB66EfA/Kvrk5mN+Dt8wPSxCa
 M/XuP4uSGn/YXLGsvd2Sd/Jo4DyOu8EEAewM1pXI=
Message-ID: <44719c334e267e20361041fbf1d8c4d2aa5125f9.camel@zaclys.net>
Subject: Various IP handling perl packages may be vulnerable
From: Léo Le Bouter <lle-bout@zaclys.net>
To: bug-guix@gnu.org
Date: Tue, 06 Apr 2021 21:05:33 +0200
Content-Type: multipart/signed; micalg="pgp-sha512";
 protocol="application/pgp-signature"; boundary="=-tPDzcV8ysifd90S+ZAXS"
User-Agent: Evolution 3.34.2 
MIME-Version: 1.0
Received-SPF: pass client-ip=178.33.93.72; envelope-from=lle-bout@zaclys.net;
 helo=mail.zaclys.net
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 1.5 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview: Read:
 https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/
 I have not had time to investigate deeply, posting here so the info is not
 lost. I have already fixed one issue related to perl-data-validate- ip in
 8ec03ed5475ca7919a7d11541ff8cbf33a9ffe67, but it se [...] 
 Content analysis details:   (1.5 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -2.3 RCVD_IN_DNSWL_MED      RBL: Sender listed at https://www.dnswl.org/,
 medium trust [209.51.188.17 listed in list.dnswl.org]
 0.0 RCVD_IN_MSPIKE_H4      RBL: Very Good reputation (+4)
 [209.51.188.17 listed in wl.mailspike.net]
 0.0 RCVD_IN_MSPIKE_WL      Mailspike good senders
 2.8 MAY_BE_FORGED          Relay IP's reverse DNS does not resolve to IP
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -2.3 (--)