New Blog Post: CVE-2022-3786 and CVE-2022-3602: X.509 Email Address Buffer Overflows

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------uYCXPiWpbngBqF41jLgnBB0F
Content-Type: multipart/mixed; boundary="------------auX1K00oO1ZFCnIB0VFLU61N";
 protected-headers="v1"
From: Matt Caswell <[email protected]>
To: [email protected],
 "[email protected]" <[email protected]>,
 "[email protected]" <[email protected]>
Message-ID: <[email protected]>
Subject: New Blog Post: CVE-2022-3786 and CVE-2022-3602: X.509 Email Address
 Buffer Overflows

--------------auX1K00oO1ZFCnIB0VFLU61N
Content-Type: multipart/mixed; boundary="------------YjyVP80WH3AuJJBD9OJEiuMa"

--------------YjyVP80WH3AuJJBD9OJEiuMa
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64

UGxlYXNlIHNlZSB0aGUgbmV3IGJsb2cgcG9zdCBoZXJlOg0KDQpodHRwczovL3d3dy5vcGVu
c3NsLm9yZy9ibG9nL2Jsb2cvMjAyMi8xMS8wMS9lbWFpbC1hZGRyZXNzLW92ZXJmbG93cy8N
Cg0K
--------------YjyVP80WH3AuJJBD9OJEiuMa
Content-Type: application/pgp-keys; name="OpenPGP_0xD9C4D26D0E604491.asc"
Content-Disposition: attachment; filename="OpenPGP_0xD9C4D26D0E604491.asc"
Content-Description: OpenPGP public key
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP PUBLIC KEY BLOCK-----
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3D=3D
=3DDm4e
-----END PGP PUBLIC KEY BLOCK-----

--------------YjyVP80WH3AuJJBD9OJEiuMa--

--------------auX1K00oO1ZFCnIB0VFLU61N--

--------------uYCXPiWpbngBqF41jLgnBB0F
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature"

-----BEGIN PGP SIGNATURE-----

wsB5BAABCAAjFiEEhlersmDwVrHlGQg52cTSbQ5gRJEFAmNhS0EFAwAAAAAACgkQ2cTSbQ5gRJFN
oAgAoDqscyikJ5WV0zAVDr4dQPiyOpu4YcCh3mq0scHlot4gStCSUPD5/zu6YNzAP84QSfXsRDkN
AdcZvQ8qKkSWsVlHUDlia5/niXHjaVcHSZ03P3jyjAC/HNLxGpnrMDWWiHBQcVX2e6nLk8WrEpN0
JruP1yFYeychuPxNQ9lrPUoQ0ZAbnIJM6hYI8axGvWIOWYKHIFJEQQ7dH7DaAvtK+brNenqlR+HY
DjQEcnD4rthX0O/xmeF5vog+uSa0KwWIT+q5GCuIA8YnLkYS+whu7QqAibooK8u4ikA3bxjNhABa
L/WofXlHhkxi7kxE6JikIeK35YZTo0Hg8kwtpE1V7A==
=XAZH
-----END PGP SIGNATURE-----

--------------uYCXPiWpbngBqF41jLgnBB0F--