Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 31: 2020-39d40d9ae9 Moderate: perl-Email-MIME Memory Exhaustion

fedora
Calendar Grey June 2, 2020
Dist Fedora Esm H88
Fedora has implemented a restriction on nested MIME components to prevent memory overflow problems associated with the perl-Email-MIME library.
This update limits the number of nested MIME parts to 10 (by default), to avoid a possible memory exhaustion issue with lots of tiny MIME parts.

Summary

This is an extension of the Email::Simple module, to handle MIME

encoded messages. It takes a message as a string, splits it up

into its constituent parts, and allows you access to various

parts of the message. Headers are decoded from MIME encoding.

This update limits the number of nested MIME parts to 10 (by default), to avoid

a possible memory exhaustion issue with lots of tiny MIME parts.

* Sun May 24 2020 Paul Howarth - 1.949-1

- Update to 1.949

- Add $Email::MIME::MAX_DEPTH and refuse to parse deeper than that many

parts; current default: 10

- Fixes to handling of content-type parameters

* Wed Jan 29 2020 Fedora Release Engineering - 1.946-9

- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

* Wed Oct 16 2019 Paul Howarth - 1.946-8

- Spec tidy-up

- Use author-independent source URL

- Specify all build dependencies

- Use DESTDIR rather than PERL_INSTALL_ROOT

- Simplify find command using -delete

- Fix permissions verbosely

- Make %files list more explicit

[ 1 ] Bug #1835353 - rubygem-mail: Out of memory issue through nested MIME parts

https://bugzilla.redhat.com/show_bug.cgi?id=1835353

su -c 'dnf upgrade --advisory FEDORA-2020-39d40d9ae9' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 31
Version: 1.949
Release: 1.fc31
Summary: Easy MIME message parsing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here