| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: perl-MIME-tools | Distribution: SUSE Linux Enterprise 16 |
| Version: 5.522.0 | Vendor: openSUSE |
| Release: bp160.1.1 | Build date: Wed Oct 28 12:23:13 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 529446 | Source RPM: perl-MIME-tools-5.522.0-bp160.1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://metacpan.org/release/MIME-tools | |
| Summary: Tools to manipulate MIME messages | |
Tools to manipulate MIME messages
Artistic-1.0 OR GPL-1.0-or-later
* Wed Oct 28 2026 Tina Müller <timueller+perl@suse.de>
- updated to 5.522.0 (5.522)
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.522 2026-10-27 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.522 RELEASED
* Many security issues were addressed (see the following ten CVEs)
Issues were brought to my attention, and patches supplied, by the
CPANSec security group.
* parse_params: flag a parameter list that could not be parsed
Detect additional ambiguous parse situations when parameter
names contain illegal characters. Fixes:
CVE-2026-116264 invalid parameter hides boundary/filename. bsc#1288723
* parse_params: check the boundary after RFC 2231 reassembly
Another ambiguous-parse case was missed (trailing space after
boundary was not detected for RFC-2231-encoded boundaries.) Fixes:
CVE-2026-116265 RFC 2231 boundary skips ambiguity checks. bsc#1288722
* parse_params: Stricter checking for encoded boundaries; earlier
versions would miss some cases. Fixes:
CVE-2026-116266 boundary changed by decoding not flagged. bsc#1288721
* Cap the indentation levels in the Results: structure. Otherwise,
specially-crafted messages could consume large amounts of memory.
Fixes: CVE-2026-116267 indent stored per message per level bsc#1288720
* parse_params: stop a comment match at the next parenthesis.
Otherwise, specially-crafted messages could cause the regex
back-tracker to consume large amounts of CPU time. Note that
MIME::Parser does not correctly parse ((nested comments)) and
has never done so. Fixes:
CVE-2026-116268 unclosed "(" comments backtrack CPU exhaustion. bsc#1288719
* parse_params: re-encode filename* values without charset tricks
Specially-crafted messages could trick recommended_filename()
into returning an empty string instead of a plausible filename.
Fixes: CVE-2026-116269 RFC 2231 language tag empties filename. bsc#1288718
* decode_mimewords: do not copy the input into each error. Otherwise,
specially-crafted messages could consume large amounts of memory.
Fixes: CVE-2026-116270 each bad "=?" copies the input into $@. bsc#1288717
* FileUnder: do not reuse an existing generated directory. Otherwise,
attackers might be able to use symbolic links to get files created
in unexpected locations. Fixes:
CVE-2026-116271 FileUnder reuses a pre-created directory. bsc#1288716
* parse_params: flag comments other readers do not skip
Specially-crafted messages could create ambiguous messages without
setting the ambiguous_parse flag. Fixes:
CVE-2026-116272 comment hides a duplicate boundary. bsc#1288715
* Call whine() rather than error() if max_parts or max_depth is
exceeded during a parse. This lets us return undef rather than
throwing an exception if ignore_errors() is set to 0.
* Change to defaults: max_parts is now set to 1000 and max_depth
to 64 rather than being unlimited. This should not affect most
real-world uses of MIME::tools, but you may need to increase
these values or set them to -1 (unlimited) if you run into trouble.
* **** NOTE INCOMPATIBILITY *****
Fixes: CVE-2026-116273 max_parts and max_depth unlimited. bsc#1288714
* Do not signal an ambiguous parse if we have filename="" or
name=""
* Update author names in META.yml
* Add git repo to META.yml
5.520 2026-10-21 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.520 RELEASED
* MIME::Parser used O(N^2) CPU time and memory parsing a MIME
message nested N levels deep. A smallish specially-crafted
message could DOS the computer by making it consume enormous
amounts of memory and CPU time. The parser was modified to use
O(N) time and memory in this case. Additionally, a new
MIME::Parser::max_depth() function was added to limit the nesting
depth before declaring a parse failure. Problem was reported to
me by Zhaoyang Li and Xiang Li from AOSP Lab at Nankai University.
* MIME::Parser would ignore multiple blank lines in a message
preamble when parsing it; this could break DKIM. Problem pointed
out and fix suggested by Tim Henderson.
* If a MIME boundary includes trailing whitespace, we mark the
parse as ambiguous. Problem noted and patch submitted by
Christian Herdtweck
5.519 2026-09-22 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.519 RELEASED
* Some (buggy) software creates base64-encoded parts as a
concatenation of multiple base64-encoded streams, and some client
software decodes each stream separately and concatenates the
results. Duplicate this behavior in MIME::tools to prevent it
from being used as a mechanism to sneak dangerous content past a
security scanner. Patch courtesy of Giorgio Premi
<giosh94mhz@gmail.com>.
* Thu Aug 27 2026 Tina Müller <timueller+perl@suse.de>
- updated to 5.518.0 (5.518)
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.518 2026-08-26 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.518 RELEASED
* Add tests for encoded "boundary=XXX" parameters and set
the ambiguous-parse flag if any are found. Patch courtesy
of Dominik Csapak <d.csapak@proxmox.com>
MIME::tools chooses to decode encoded boundary parameters.
MUA behaviors differ; Claws-Mail decodes them while Thunderbird
does not.
* Don't ignore invalid whitespace after "boundary=XXX" parameter.
Patch courtesy of Dominik Csapak <d.csapak@proxmox.com>
* Ignore comments between tokens. A header parameter can be
written foo(comment)=bar and it's the same as foo=bar.
Patch courtesy of Dominik Csapak <d.csapak@proxmox.com>
* Wed Feb 11 2026 Tina Müller <timueller+perl@suse.de>
- updated to 5.517.0 (5.517)
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.517 2026-02-10 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.517 RELEASED
* Add a missing test message file that was causing tests to fail.
5.516 2026-02-10 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.516 RELEASED
* Handle MIME parameters of the form param= better (ie,
a parameter with no value at all.) It's treated the
same as param="" rather than aborting the parse.
* Diagnose additional types of malformed MIME as ambiguous.
Specifically, an empty boundary parameters like boundary= or
boundary="" is treated as ambiguous. Thanks to Stoiko Ivanov
<s.ivanov@proxmox.com> for pointing out this missing case.
* Thu Apr 25 2024 Tina Müller <timueller+perl@suse.de>
- updated to 5.515
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.515 2024-04-24 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.514 RELEASED
* Fix the "version" setting in META.yml. There are no other changes
since 5.514.
* Wed Feb 07 2024 Tina Müller <timueller+perl@suse.de>
- updated to 5.514
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.514 2024-02-06 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.514 RELEASED
* Move the guts of the ambiguous_content method to MIME::Head
* Add MIME::Entity->ambiguous_content that returns true if
this entity or any of its parts, recursively, has a MIME::Head
whose ambiguous_content method returns true.
* Keep MIME::Parser->ambiguous_content as a cached version of the
most recently parsed $entity->ambiguous_content.
* BUGFIX: Add some missing files to MANIFEST
5.513 2024-01-25 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.513 RELEASED
* Add MIME::Parser->ambiguous_content to indicate one of several
types of ambiguous MIME content that could be security risks.
* Add the '@duplicate_parameters' pseudo-parameter to let caller
detect duplicate MIME parameters on a MIME header.
5.512 2024-01-08 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.512 RELEASED
* Use much larger chunk sizes for Base-64 encoding which reduces
both encoding time and space overhead.
https://rt.cpan.org/Ticket/Display.html?id=128400
https://rt.cpan.org/Ticket/Display.html?id=130110
* Wed Jan 03 2024 Tina Müller <timueller+perl@suse.de>
- updated to 5.511
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.511 2024-01-02 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.511 RELEASED
* Silence a warning if used with a development version of
MIME::QuotedPrint
https://rt.cpan.org/Ticket/Display.html?id=150118
https://rt.cpan.org/Ticket/Display.html?id=149225
* Thu Jul 07 2022 Tina Müller <timueller+perl@suse.de>
- updated to 5.510
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
* Fri Apr 07 2017 coolo@suse.com
- updated to 5.509
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.509 2017-04-05 Dianne Skoll <dfs@roaringpenguin.com>
* VERSION 5.509 RELEASED
* Fix CPAN bug https://rt.cpan.org/Ticket/Display.html?id=120871
Makefile.PL fails with no '.' in @INC
* Fix CPAN bug https://rt.cpan.org/Ticket/Display.html?id=118262
Test t/Ref.t fails on Windows install
* Fix CPAN bug https://rt.cpan.org/Ticket/Display.html?id=119166
MIME::Parser::parse_data() should check what it gets back...
* Fix CPAN bug https://rt.cpan.org/Ticket/Display.html?id=119568
Allow
to be used as line-end delimeter when outputting MIME
message.
* Wed Aug 31 2016 coolo@suse.com
- updated to 5.508
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.508 2016-08-29 Dianne Skoll <dfs@roaringpenguin.com>
* VERSION 5.508 RELEASED
* Fix test broken by Perl update
https://rt.cpan.org/Ticket/Display.html?id=113887
* Mon May 30 2016 bwiedemann@suse.com
- Add MIME-tools-5.507-rt113887.patch from fedora
to fix test failure with new MailTools
* Fri Oct 02 2015 coolo@suse.com
- updated to 5.507
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.507 2015-09-30 Dianne Skoll <dfs@roaringpenguin.com>
* VERSION 5.507 RELEASED
* Fix parsing bug
https://rt.cpan.org/Public/Bug/Display.html?id=105455
* Fix typo that broke MIME::Body::incore->open() on Perl 5.20
* Sat May 02 2015 coolo@suse.com
- updated to 5.506
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
* Mon Jun 17 2013 coolo@suse.com
- updated to 5.504
* Fix encoding of MIME parameters that contain a quoted
string: "like \"this"
https://rt.cpan.org/Public/Bug/Display.html?id=80433
* Suppress useless warnings from tests
https://rt.cpan.org/Public/Bug/Display.html?id=80679
* Fix long-standing bug in encode_mimewords that can
break multibyte-encodings (eg, utf-8)
https://rt.cpan.org/Public/Bug/Display.html?id=5462
* Avoid inappropriately untainting data
https://rt.cpan.org/Public/Bug/Display.html?id=67119
* Localise $\ to avoid parsing problems if it's set elsewhere
https://rt.cpan.org/Public/Bug/Display.html?id=71041
* Improve exorcising of filenames
https://rt.cpan.org/Public/Bug/Display.html?id=71677
* Fix potential race condition in t/Smtpsend.t
https://rt.cpan.org/Public/Bug/Display.html?id=68879
* Allow native I/O on File::Handle objects
https://rt.cpan.org/Public/Bug/Display.html?id=72538
* Add "recommends Convert::BinHex" clause to Makefile.PL
https://rt.cpan.org/Public/Bug/Display.html?id=72223
* Add module_name to Makefile.PL
https://rt.cpan.org/Public/Bug/Display.html?id=77138
* Fix "Uninitialized value" warning
https://rt.cpan.org/Public/Bug/Display.html?id=77190
* Don't run t/Smtpsend.t on systems that lack fork()
https://rt.cpan.org/Public/Bug/Display.html?id=77351
* Add "use strict" everywhere
* Wed Mar 09 2011 vcizek@novell.com
- update to 5.502
* NOTE to packagers (Debian, Red Hat, FreeBSD, etc.): Do not ship
MIME::tools 5.500 or 5.501. They both had serious bugs!
* Fix parsing bug: https://rt.cpan.org/Ticket/Display.html?id=66025
* Fix typo: https://rt.cpan.org/Ticket/Display.html?id=65387
* Fix unit tests on Perl 5.8.x: https://rt.cpan.org/Ticket/Display.html?id=66188
* Fix unit test failure on Win32: (https://rt.cpan.org/Ticket/Display.html?id=66286)
* Mon Feb 21 2011 vcizek@novell.com
- update to 5.501
* Add build_requires 'Test::Deep'; to Makefile (rt.cpan.org #64659)
* Fix spelling errors (rt.cpan.org #64610)
* Fix double-decoding bug when decoding RFC-2231-encoded parameters
(rt.cpan.org #65162)
* Fix inappropriate inclusion of CR characters in parsed headers
* Tue Jan 11 2011 vcizek@novell.com
- added dependency perl-Test-Deep
- updated to 5.500
* (cleanup) IO-Stringy (specifically, IO::ScalarArray, IO::Lines, and
IO::InnerFile) is no longer used
* (ticket 22684) Fix deadlock in filter() when invoking external
programs such as gzip. (Alexey Tourbin <at -at- altlinux.ru>)
* Remove auto_install from Makefile.PL
* (ticket 60931) If preamble is empty, make sure it's still empty after roundtripping through MIME::Entity
* (ticket 63739) Properly decude RFC2231 encodings in attachment filenames
* Wed Dec 01 2010 coolo@novell.com
- switch to perl_requires macro
* Mon Nov 29 2010 coolo@novell.com
- remove /var/adm/perl-modules
* Fri Jul 16 2010 anicka@suse.cz
- update to 5.428
* Only bind to localhost in smtpsend test, rather than to all
available interfaces.
* bugfixes
* Thu Mar 25 2010 ro@suse.de
- use perl_vendorlib in install section
* Sun Jan 10 2010 jengelh@medozas.de
- enable parallel build
* Mon Aug 10 2009 anicka@suse.cz
- add dependency in perl-Convert-BinHex (bnc#527387)
* Mon Jul 27 2009 coolo@novell.com
- require File::Temp and don't install from cpan
* Thu Jan 15 2009 anicka@suse.cz
- enable testsuite (bnc#465976)
* Fri Jul 25 2008 anicka@suse.cz
- update to 5.427
* (bugfix) fix remove_sig() on invalid multipart message
* (bugfix) make_singlepart() no longer creates bizzare
Content-Type: headers
* (bugfix) process_part() no longer sets incorrect charset on empty
parts
* (bugfix) fix runtime warnings caused by incorrect pack() string
* (docs) add "SEE ALSO" sections to POD docs
* (docs) fix documentation of MIME::Head::get()
* (packaging) Depend on IO::File 1.1.3, for its binmode() support
* Mon Mar 24 2008 anicka@suse.cz
- update to 5.426
* (bugfix) require File::Temp 0.18 or newer, as we need seek()
* (bugfix) Don't hang forever in t/Smtpsend.t
* (bugfix) require Perl 5.8.0 or newer in Makefile.PL
* (bugfix) encode_mimewords() no longer removes spaces between two
encoded words
* Wed Nov 21 2007 anicka@suse.cz
- update to 5.425
* (bugfix) A stub for MIME::Parser's tmp_recycling() method has been
re-added to preserve compatibility.
* Fri Nov 09 2007 anicka@suse.cz
- update to 5.424
* (bugfix)lines in $entity->body() should be newline-terminated.
* Mon Oct 08 2007 anicka@suse.cz
- update to 5.423
* (enhancement) Use File::Temp for tempfile generation.
MIME::Parser now has a tmp_dir() method for changing
the temporary directory on a per-parser basis.
* bugfixes
* Fri Jul 14 2006 anicka@suse.cz
- update to 5.420
* Fix regression introduced in 5.419 -- quoted-printable
encoding would sometimes fail on "textual" MIME parts.
* Wed Jan 25 2006 mls@suse.de
- converted neededforbuild to BuildRequires
* Fri Dec 23 2005 schubi@suse.de
- update to version 5.419
* Fri Apr 15 2005 schubi@suse.de
- update to 5.417
* Mon Jan 10 2005 schwab@suse.de
- Fix file cleanup.
* Thu Nov 04 2004 choeger@suse.de
- update to v5.415
(containing Bugfix ID#47851 - VUL-0: perl-Mime-tools passes some mime
attachments)
* Sun Jan 11 2004 adrian@suse.de
- add %defattr
* Fri Aug 22 2003 mjancar@suse.cz
- require the perl version we build with
* Thu Jul 17 2003 choeger@suse.de
- use install_vendor and new %perl_process_packlist macro
* Mon May 19 2003 choeger@suse.de
- remove installed (but unpackaged) file perllocal.pod
* Thu Aug 08 2002 mls@suse.de
- use sitearch macro
* Mon Jul 29 2002 mls@suse.de
- Fixed neededforbuild for perl-5.8.0
* Tue Jul 02 2002 mls@suse.de
- remove race in .packlist generation
* Sun Jan 13 2002 link@suse.de
- update to v5.411a
* Fri May 04 2001 link@suse.de
- updated to v5.410 as all version below v5.313 have a nasty
bug with evil filenames
* Thu Mar 29 2001 choeger@suse.de
- fixed requires
* Wed Nov 15 2000 choeger@suse.de
- long package name
- buildroot
* Mon Jul 24 2000 choeger@suse.de
- removed p_filspe from neededforbuild, because it is
included in the perl package
* Wed Jul 19 2000 choeger@suse.de
- first package, v5.304
/usr/lib/perl5/vendor_perl/5.42.0/MIME /usr/lib/perl5/vendor_perl/5.42.0/MIME/Body.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Decoder /usr/lib/perl5/vendor_perl/5.42.0/MIME/Decoder.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Decoder/Base64.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Decoder/BinHex.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Decoder/Binary.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Decoder/Gzip64.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Decoder/NBit.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Decoder/QuotedPrint.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Decoder/UU.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Entity.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Field /usr/lib/perl5/vendor_perl/5.42.0/MIME/Field/ConTraEnc.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Field/ContDisp.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Field/ContType.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Field/ParamVal.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Head.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Parser /usr/lib/perl5/vendor_perl/5.42.0/MIME/Parser.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Parser/Filer.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Parser/Reader.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Parser/Results.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Tools.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/WordDecoder.pm /usr/lib/perl5/vendor_perl/5.42.0/MIME/Words.pm /usr/share/doc/packages/perl-MIME-tools /usr/share/doc/packages/perl-MIME-tools/ChangeLog /usr/share/doc/packages/perl-MIME-tools/README /usr/share/doc/packages/perl-MIME-tools/examples /usr/share/doc/packages/perl-MIME-tools/examples/README /usr/share/doc/packages/perl-MIME-tools/examples/mimeabuse /usr/share/doc/packages/perl-MIME-tools/examples/mimedump /usr/share/doc/packages/perl-MIME-tools/examples/mimeencode /usr/share/doc/packages/perl-MIME-tools/examples/mimeexplode /usr/share/doc/packages/perl-MIME-tools/examples/mimepostcard /usr/share/doc/packages/perl-MIME-tools/examples/mimeprint /usr/share/doc/packages/perl-MIME-tools/examples/mimeref /usr/share/doc/packages/perl-MIME-tools/examples/mimesend /usr/share/doc/packages/perl-MIME-tools/examples/mimesender /usr/share/doc/packages/perl-MIME-tools/examples/mimetour /usr/share/licenses/perl-MIME-tools /usr/share/licenses/perl-MIME-tools/COPYING /usr/share/man/man3/MIME::Body.3pm.gz /usr/share/man/man3/MIME::Decoder.3pm.gz /usr/share/man/man3/MIME::Decoder::Base64.3pm.gz /usr/share/man/man3/MIME::Decoder::BinHex.3pm.gz /usr/share/man/man3/MIME::Decoder::Binary.3pm.gz /usr/share/man/man3/MIME::Decoder::Gzip64.3pm.gz /usr/share/man/man3/MIME::Decoder::NBit.3pm.gz /usr/share/man/man3/MIME::Decoder::QuotedPrint.3pm.gz /usr/share/man/man3/MIME::Decoder::UU.3pm.gz /usr/share/man/man3/MIME::Entity.3pm.gz /usr/share/man/man3/MIME::Field::ConTraEnc.3pm.gz /usr/share/man/man3/MIME::Field::ContDisp.3pm.gz /usr/share/man/man3/MIME::Field::ContType.3pm.gz /usr/share/man/man3/MIME::Field::ParamVal.3pm.gz /usr/share/man/man3/MIME::Head.3pm.gz /usr/share/man/man3/MIME::Parser.3pm.gz /usr/share/man/man3/MIME::Parser::Filer.3pm.gz /usr/share/man/man3/MIME::Parser::Reader.3pm.gz /usr/share/man/man3/MIME::Parser::Results.3pm.gz /usr/share/man/man3/MIME::Tools.3pm.gz /usr/share/man/man3/MIME::WordDecoder.3pm.gz /usr/share/man/man3/MIME::Words.3pm.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Nov 11 23:38:33 2026