Fedora: 2020-22764f623f Moderate: perl-Email-MIME Memory Exhaustion Risk

This is an extension of the Email::Simple module, to handle MIME

encoded messages. It takes a message as a string, splits it up

into its constituent parts, and allows you access to various

parts of the message. Headers are decoded from MIME encoding.

This update limits the number of nested MIME parts to 10 (by default), to avoid

a possible memory exhaustion issue with lots of tiny MIME parts.

* Sun May 24 2020 Paul Howarth - 1.949-1

- Update to 1.949

- Add $Email::MIME::MAX_DEPTH and refuse to parse deeper than that many

parts; current default: 10

- Fixes to handling of content-type parameters

[ 1 ] Bug #1835353 - rubygem-mail: Out of memory issue through nested MIME parts

https://bugzilla.redhat.com/show_bug.cgi?id=1835353

su -c 'dnf upgrade --advisory FEDORA-2020-22764f623f' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/