perl-email-project / email-send Goto Github PK

#!/usr/bin/perl -w
use strict;
use warnings FATAL => qw{ uninitialized };
use autodie;
use Email::Send;

leads to

perl test.pl                                                                                     |use vars qw[$VERSION];
Subroutine main::send redefined at /opt/local/lib/perl5/site_perl/5.22/Email/Send.pm line 273.   |$VERSION   = '2.201';
Prototype mismatch: sub main::send (*$$;$) vs none at /opt/local/lib/perl5/site_perl/5.22/Email/\|
Send.pm line 273.                                                                                |use Email::Simple 1.92;

I am still using Send instead of Sender, because the whole shebang fails compiling on OSX (probably on Moo).

I'm maintaining a legacy application that uses Email::Send. After upgrading to a newer version of Perl the script stopped working reliably. This is because Perl 5.18 introduced Hash order randomization, which causes Email::Send to try the available mailers in random order. If the "Test" mailer is tried before SMTP or Sendmail, the mail is lost.

Please consider adding a note to the documentation, and maybe issuing a warning when Email::Send->new is called without mailer parameter.

originally reported at https://rt.cpan.org/Ticket/Display.html?id=57301

use Email::MIME;
use Email::Send; warn
send "SMTP" => Email::MIME->create(header => [ From => "foo@foo.com", to => 
"wallace@reis.org.br", subject => "foo" ], body => "foo"), qw/smtp.gmail.com tls 1 username 
foo password bar/;'
Can't locate object method "auth" via package "Net::SMTP::TLS" at 
/home/wallacer/perl5/lib/perl5/Email/Send/SMTP.pm line 65, <GEN0> line 7.

See, for the first statement (module deprecation): http://search.cpan.org/~rjbs/Email-Address-1.909/lib/Email/Address.pm
and for the second one (remote DOS): https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7686 .
The CPAN site recommends switching to the Email::Address::XS module(http://search.cpan.org/~pali/Email-Address-XS-1.03/lib/Email/Address/XS.pm),
because it is a drop-in replacement for the original Email::Address and it was created to fix the above CVE.

Please do such switch to Email::Address::XS for Email::Send...
The passage can be made near trivially, by simply changing all the recurrences (but one) of "Email::Address" to "Email::Address::XS" (see attached patch)
perl-Email-Send-2.201-use-Email-Address-XS.txt
.