perl-MIME-tools-5.522-1.el10_2 RPM for noarch

From EPEL 10.2 Testing for x86_64 / Packages / p

MIME-tools - modules for parsing (and creating!) MIME entities. Modules in this
toolkit: Abstract message holder (file, scalar, etc.), OO interface for
decoding MIME messages, an extracted and decoded MIME entity, Mail::Field
subclasses for parsing fields, a parsed MIME header (Mail::Header subclass),
parser and tool for building your own MIME parser, and utilities.

Provides

• perl-MIME-tools
• perl(MIME::Body)
• perl(MIME::Body::File)
• perl(MIME::Body::InCore)
• perl(MIME::Body::Scalar)
• perl(MIME::Decoder)
• perl(MIME::Decoder::Base64)
• perl(MIME::Decoder::BinHex)
• perl(MIME::Decoder::Binary)
• perl(MIME::Decoder::Gzip64)
• perl(MIME::Decoder::NBit)
• perl(MIME::Decoder::QuotedPrint)
• perl(MIME::Decoder::UU)
• perl(MIME::Entity)
• perl(MIME::Field::ConTraEnc)
• perl(MIME::Field::ContDisp)
• perl(MIME::Field::ContType)
• perl(MIME::Field::ParamVal)
• perl(MIME::Head)
• perl(MIME::Parser)
• perl(MIME::Parser::FileInto)
• perl(MIME::Parser::FileUnder)
• perl(MIME::Parser::Filer)
• perl(MIME::Parser::Reader)
• perl(MIME::Parser::Results)
• perl(MIME::Tools)
• perl(MIME::WordDecoder)
• perl(MIME::WordDecoder::ISO_8859)
• perl(MIME::WordDecoder::US_ASCII)
• perl(MIME::WordDecoder::UTF_8)
• perl(MIME::Words)

Requires

• /usr/bin/perl
• perl(:VERSION) >= 5.4.0
• perl(:VERSION) >= 5.4.0
• perl(:VERSION) >= 5.4.0
• perl(Carp)
• perl(Config)
• perl(Convert::BinHex)
• perl(Convert::BinHex)
• perl(Encode)
• perl(Exporter)
• perl(File::Path)
• perl(File::Spec)
• perl(File::Temp) >= 0.18
• perl(FileHandle)
• perl(Getopt::Std)
• perl(IO::File)
• perl(IO::Select)
• perl(IPC::Open2)
• perl(MIME::Base64) >= 2.04
• perl(MIME::Body)
• perl(MIME::Decoder)
• perl(MIME::Decoder::Base64)
• perl(MIME::Entity)
• perl(MIME::Field::ConTraEnc)
• perl(MIME::Field::ContDisp)
• perl(MIME::Field::ContType)
• perl(MIME::Field::ParamVal)
• perl(MIME::Head)
• perl(MIME::Parser)
• perl(MIME::Parser::Filer)
• perl(MIME::Parser::Reader)
• perl(MIME::Parser::Results)
• perl(MIME::QuotedPrint)
• perl(MIME::Tools)
• perl(MIME::WordDecoder)
• perl(MIME::Words)
• perl(Mail::Field) >= 1.05
• perl(Mail::Header) >= 1.09
• perl(Mail::Internet) >= 1.28
• perl(Symbol)
• perl(lib)
• perl(re)
• perl(strict)
• perl(vars)
• perl(version)
• perl(warnings)
• perl-libs
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

GPL-1.0-or-later OR Artistic-1.0-Perl

Changelog

* Wed Oct 28 2026 Paul Howarth <paul@city-fan.org> - 5.522-1
  - Update to 5.522
    - parse_params: Flag a parameter list that could not be parsed
      - Detect additional ambiguous parse situations when parameter names contain
        illegal characters
      - Fixes: CVE-2026-116264 invalid parameter hides boundary/filename
    - parse_params: Check the boundary after RFC 2231 reassembly
      - Another ambiguous-parse case was missed (trailing space after boundary
        was not detected for RFC-2231-encoded boundaries)
      - Fixes: CVE-2026-116265 RFC 2231 boundary skips ambiguity checks
    - parse_params: Stricter checking for encoded boundaries; earlier versions
      would miss some cases
      - Fixes: CVE-2026-116266 boundary changed by decoding not flagged
    - Cap the indentation levels in the Results: structure; otherwise,
      specially-crafted messages could consume large amounts of memory
      - Fixes: CVE-2026-116267 indent stored per message per level
    - parse_params: Stop a comment match at the next parenthesis; otherwise,
      specially-crafted messages could cause the regex back-tracker to consume
      large amounts of CPU time
      - Note that MIME::Parser does not correctly parse ((nested comments)) and
        has never done so
      - Fixes: CVE-2026-116268 unclosed "(" comments backtrack CPU exhaustion
    - parse_params: Re-encode filename* values without charset tricks
      - Specially-crafted messages could trick recommended_filename() into
        returning an empty string instead of a plausible filename
      - Fixes: CVE-2026-116269 RFC 2231 language tag empties filename
    - decode_mimewords: Do not copy the input into each error; otherwise,
      specially-crafted messages could consume large amounts of memory
      - Fixes: CVE-2026-116270 each bad "=?" copies the input into $@
    - FileUnder: Do not reuse an existing generated directory; otherwise,
      attackers might be able to use symbolic links to get files created in
      unexpected locations
      - Fixes: CVE-2026-116271 FileUnder reuses a pre-created directory
    - parse_params: Flag comments other readers do not skip
      - Specially-crafted messages could create ambiguous messages without
        setting the ambiguous_parse flag
      - Fixes: CVE-2026-116272  comment hides a duplicate boundary
    - Call whine() rather than error() if max_parts or max_depth is exceeded
      during a parse; this lets us return undef rather than throwing an exception
      if ignore_errors() is set to 0
    - Change to defaults: max_parts is now set to 1000 and max_depth to 64 rather
      than being unlimited; this should not affect most real-world uses of
      MIME::tools, but you may need to increase these values or set them to -1
      (unlimited) if you run into trouble (* NOTE INCOMPATIBILITY *)
      - Fixes: CVE-2026-116273 max_parts and max_depth unlimited
    - Do not signal an ambiguous parse if we have filename="" or name=""
    - Update author names in META.yml
    - Add git repo to META.yml
* Thu Oct 22 2026 Paul Howarth <paul@city-fan.org> - 5.520-1
  - Update to 5.520
    - MIME::Parser used O(N^2) CPU time and memory parsing a MIME message nested
      N levels deep, and a smallish specially-crafted message could DOS the
      computer by making it consume enormous amounts of memory and CPU time
      - The parser was modified to use O(N) time and memory in this case
      - Additionally, a new MIME::Parser::max_depth() function was added to limit
        the nesting depth before declaring a parse failure
    - MIME::Parser would ignore multiple blank lines in a message preamble when
      parsing it; this could break DKIM
    - If a MIME boundary includes trailing whitespace, we mark the parse as
      ambiguous
* Wed Sep 23 2026 Paul Howarth <paul@city-fan.org> - 5.519-1
  - Update to 5.519
    - Some (buggy) software creates base64-encoded parts as a concatenation of
      multiple base64-encoded streams, and some client software decodes each
      stream separately and concatenates the results; duplicate this behavior in
      MIME::tools to prevent it from being used as a mechanism to sneak
      dangerous content past a security scanner
* Thu Aug 27 2026 Paul Howarth <paul@city-fan.org> - 5.518-1
  - Update to 5.518
    - Add tests for encoded "boundary=XXX" parameters and set the ambiguous-parse
      flag if any are found
    - MIME::tools chooses to decode encoded boundary parameters, whilst MUA
      behaviors differ; Claws-Mail decodes them while Thunderbird does not
    - Don't ignore invalid whitespace after "boundary=XXX" parameter
    - Ignore comments between tokens; a header parameter can be written
      foo(comment)=bar and it's the same as foo=bar
* Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 5.517-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Wed Feb 11 2026 Paul Howarth <paul@city-fan.org> - 5.517-1
  - Update to 5.517
    - Handle MIME parameters of the form param= better (i.e. a parameter with no
      value at all); it's treated the same as param="" rather than aborting the
      parse
    - Diagnose additional types of malformed MIME as ambiguous; specifically, an
      empty boundary parameter like boundary= or boundary="" is treated as
      ambiguous
* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 5.515-5
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 5.515-4
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sat Jan 18 2025 Fedora Release Engineering <releng@fedoraproject.org> - 5.515-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

Files

/usr/bin/mimedump
/usr/bin/mimeencode
/usr/bin/mimeexplode
/usr/bin/mimepostcard
/usr/bin/mimesend
/usr/share/doc/perl-MIME-tools
/usr/share/doc/perl-MIME-tools/ChangeLog
/usr/share/doc/perl-MIME-tools/README
/usr/share/doc/perl-MIME-tools/examples
/usr/share/doc/perl-MIME-tools/examples/README
/usr/share/doc/perl-MIME-tools/examples/mimeabuse
/usr/share/doc/perl-MIME-tools/examples/mimeprint
/usr/share/doc/perl-MIME-tools/examples/mimeref
/usr/share/doc/perl-MIME-tools/examples/mimesender
/usr/share/doc/perl-MIME-tools/examples/mimetour
/usr/share/licenses/perl-MIME-tools
/usr/share/licenses/perl-MIME-tools/COPYING
/usr/share/man/man1/mimedump.1.gz
/usr/share/man/man1/mimeencode.1.gz
/usr/share/man/man1/mimeexplode.1.gz
/usr/share/man/man1/mimepostcard.1.gz
/usr/share/man/man1/mimesend.1.gz
/usr/share/man/man3/MIME::Body.3pm.gz
/usr/share/man/man3/MIME::Decoder.3pm.gz
/usr/share/man/man3/MIME::Decoder::Base64.3pm.gz
/usr/share/man/man3/MIME::Decoder::BinHex.3pm.gz
/usr/share/man/man3/MIME::Decoder::Binary.3pm.gz
/usr/share/man/man3/MIME::Decoder::Gzip64.3pm.gz
/usr/share/man/man3/MIME::Decoder::NBit.3pm.gz
/usr/share/man/man3/MIME::Decoder::QuotedPrint.3pm.gz
/usr/share/man/man3/MIME::Decoder::UU.3pm.gz
/usr/share/man/man3/MIME::Entity.3pm.gz
/usr/share/man/man3/MIME::Field::ConTraEnc.3pm.gz
/usr/share/man/man3/MIME::Field::ContDisp.3pm.gz
/usr/share/man/man3/MIME::Field::ContType.3pm.gz
/usr/share/man/man3/MIME::Field::ParamVal.3pm.gz
/usr/share/man/man3/MIME::Head.3pm.gz
/usr/share/man/man3/MIME::Parser.3pm.gz
/usr/share/man/man3/MIME::Parser::Filer.3pm.gz
/usr/share/man/man3/MIME::Parser::Reader.3pm.gz
/usr/share/man/man3/MIME::Parser::Results.3pm.gz
/usr/share/man/man3/MIME::Tools.3pm.gz
/usr/share/man/man3/MIME::WordDecoder.3pm.gz
/usr/share/man/man3/MIME::Words.3pm.gz
/usr/share/perl5/vendor_perl/MIME
/usr/share/perl5/vendor_perl/MIME/Body.pm
/usr/share/perl5/vendor_perl/MIME/Decoder
/usr/share/perl5/vendor_perl/MIME/Decoder.pm
/usr/share/perl5/vendor_perl/MIME/Decoder/Base64.pm
/usr/share/perl5/vendor_perl/MIME/Decoder/BinHex.pm
/usr/share/perl5/vendor_perl/MIME/Decoder/Binary.pm
/usr/share/perl5/vendor_perl/MIME/Decoder/Gzip64.pm
/usr/share/perl5/vendor_perl/MIME/Decoder/NBit.pm
/usr/share/perl5/vendor_perl/MIME/Decoder/QuotedPrint.pm
/usr/share/perl5/vendor_perl/MIME/Decoder/UU.pm
/usr/share/perl5/vendor_perl/MIME/Entity.pm
/usr/share/perl5/vendor_perl/MIME/Field
/usr/share/perl5/vendor_perl/MIME/Field/ConTraEnc.pm
/usr/share/perl5/vendor_perl/MIME/Field/ContDisp.pm
/usr/share/perl5/vendor_perl/MIME/Field/ContType.pm
/usr/share/perl5/vendor_perl/MIME/Field/ParamVal.pm
/usr/share/perl5/vendor_perl/MIME/Head.pm
/usr/share/perl5/vendor_perl/MIME/Parser
/usr/share/perl5/vendor_perl/MIME/Parser.pm
/usr/share/perl5/vendor_perl/MIME/Parser/Filer.pm
/usr/share/perl5/vendor_perl/MIME/Parser/Reader.pm
/usr/share/perl5/vendor_perl/MIME/Parser/Results.pm
/usr/share/perl5/vendor_perl/MIME/Tools.pm
/usr/share/perl5/vendor_perl/MIME/WordDecoder.pm
/usr/share/perl5/vendor_perl/MIME/Words.pm

Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Oct 29 05:15:40 2026