| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: perl-MIME-tools | Distribution: openSUSE Tumbleweed |
| Version: 5.522.0 | Vendor: openSUSE |
| Release: 1.1 | Build date: Thu Oct 29 17:25:29 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 529462 | Source RPM: perl-MIME-tools-5.522.0-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://metacpan.org/release/MIME-tools | |
| Summary: Tools to manipulate MIME messages | |
Tools to manipulate MIME messages
Artistic-1.0 OR GPL-1.0-or-later
* Wed Oct 28 2026 Tina Müller <timueller+perl@suse.de>
- updated to 5.522.0 (5.522)
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.522 2026-10-27 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.522 RELEASED
* Many security issues were addressed (see the following ten CVEs)
Issues were brought to my attention, and patches supplied, by the
CPANSec security group.
* parse_params: flag a parameter list that could not be parsed
Detect additional ambiguous parse situations when parameter
names contain illegal characters. Fixes:
CVE-2026-116264 invalid parameter hides boundary/filename. bsc#1288723
* parse_params: check the boundary after RFC 2231 reassembly
Another ambiguous-parse case was missed (trailing space after
boundary was not detected for RFC-2231-encoded boundaries.) Fixes:
CVE-2026-116265 RFC 2231 boundary skips ambiguity checks. bsc#1288722
* parse_params: Stricter checking for encoded boundaries; earlier
versions would miss some cases. Fixes:
CVE-2026-116266 boundary changed by decoding not flagged. bsc#1288721
* Cap the indentation levels in the Results: structure. Otherwise,
specially-crafted messages could consume large amounts of memory.
Fixes: CVE-2026-116267 indent stored per message per level bsc#1288720
* parse_params: stop a comment match at the next parenthesis.
Otherwise, specially-crafted messages could cause the regex
back-tracker to consume large amounts of CPU time. Note that
MIME::Parser does not correctly parse ((nested comments)) and
has never done so. Fixes:
CVE-2026-116268 unclosed "(" comments backtrack CPU exhaustion. bsc#1288719
* parse_params: re-encode filename* values without charset tricks
Specially-crafted messages could trick recommended_filename()
into returning an empty string instead of a plausible filename.
Fixes: CVE-2026-116269 RFC 2231 language tag empties filename. bsc#1288718
* decode_mimewords: do not copy the input into each error. Otherwise,
specially-crafted messages could consume large amounts of memory.
Fixes: CVE-2026-116270 each bad "=?" copies the input into $@. bsc#1288717
* FileUnder: do not reuse an existing generated directory. Otherwise,
attackers might be able to use symbolic links to get files created
in unexpected locations. Fixes:
CVE-2026-116271 FileUnder reuses a pre-created directory. bsc#1288716
* parse_params: flag comments other readers do not skip
Specially-crafted messages could create ambiguous messages without
setting the ambiguous_parse flag. Fixes:
CVE-2026-116272 comment hides a duplicate boundary. bsc#1288715
* Call whine() rather than error() if max_parts or max_depth is
exceeded during a parse. This lets us return undef rather than
throwing an exception if ignore_errors() is set to 0.
* Change to defaults: max_parts is now set to 1000 and max_depth
to 64 rather than being unlimited. This should not affect most
real-world uses of MIME::tools, but you may need to increase
these values or set them to -1 (unlimited) if you run into trouble.
* **** NOTE INCOMPATIBILITY *****
Fixes: CVE-2026-116273 max_parts and max_depth unlimited. bsc#1288714
* Do not signal an ambiguous parse if we have filename="" or
name=""
* Update author names in META.yml
* Add git repo to META.yml
5.520 2026-10-21 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.520 RELEASED
* MIME::Parser used O(N^2) CPU time and memory parsing a MIME
message nested N levels deep. A smallish specially-crafted
message could DOS the computer by making it consume enormous
amounts of memory and CPU time. The parser was modified to use
O(N) time and memory in this case. Additionally, a new
MIME::Parser::max_depth() function was added to limit the nesting
depth before declaring a parse failure. Problem was reported to
me by Zhaoyang Li and Xiang Li from AOSP Lab at Nankai University.
* MIME::Parser would ignore multiple blank lines in a message
preamble when parsing it; this could break DKIM. Problem pointed
out and fix suggested by Tim Henderson.
* If a MIME boundary includes trailing whitespace, we mark the
parse as ambiguous. Problem noted and patch submitted by
Christian Herdtweck
5.519 2026-09-22 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.519 RELEASED
* Some (buggy) software creates base64-encoded parts as a
concatenation of multiple base64-encoded streams, and some client
software decodes each stream separately and concatenates the
results. Duplicate this behavior in MIME::tools to prevent it
from being used as a mechanism to sneak dangerous content past a
security scanner. Patch courtesy of Giorgio Premi
<giosh94mhz@gmail.com>.
* Thu Aug 27 2026 Tina Müller <timueller+perl@suse.de>
- updated to 5.518.0 (5.518)
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.518 2026-08-26 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.518 RELEASED
* Add tests for encoded "boundary=XXX" parameters and set
the ambiguous-parse flag if any are found. Patch courtesy
of Dominik Csapak <d.csapak@proxmox.com>
MIME::tools chooses to decode encoded boundary parameters.
MUA behaviors differ; Claws-Mail decodes them while Thunderbird
does not.
* Don't ignore invalid whitespace after "boundary=XXX" parameter.
Patch courtesy of Dominik Csapak <d.csapak@proxmox.com>
* Ignore comments between tokens. A header parameter can be
written foo(comment)=bar and it's the same as foo=bar.
Patch courtesy of Dominik Csapak <d.csapak@proxmox.com>
* Wed Feb 11 2026 Tina Müller <timueller+perl@suse.de>
- updated to 5.517.0 (5.517)
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.517 2026-02-10 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.517 RELEASED
* Add a missing test message file that was causing tests to fail.
5.516 2026-02-10 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.516 RELEASED
* Handle MIME parameters of the form param= better (ie,
a parameter with no value at all.) It's treated the
same as param="" rather than aborting the parse.
* Diagnose additional types of malformed MIME as ambiguous.
Specifically, an empty boundary parameters like boundary= or
boundary="" is treated as ambiguous. Thanks to Stoiko Ivanov
<s.ivanov@proxmox.com> for pointing out this missing case.
* Thu Apr 25 2024 Tina Müller <timueller+perl@suse.de>
- updated to 5.515
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.515 2024-04-24 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.514 RELEASED
* Fix the "version" setting in META.yml. There are no other changes
since 5.514.
* Wed Feb 07 2024 Tina Müller <timueller+perl@suse.de>
- updated to 5.514
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.514 2024-02-06 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.514 RELEASED
* Move the guts of the ambiguous_content method to MIME::Head
* Add MIME::Entity->ambiguous_content that returns true if
this entity or any of its parts, recursively, has a MIME::Head
whose ambiguous_content method returns true.
* Keep MIME::Parser->ambiguous_content as a cached version of the
most recently parsed $entity->ambiguous_content.
* BUGFIX: Add some missing files to MANIFEST
5.513 2024-01-25 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.513 RELEASED
* Add MIME::Parser->ambiguous_content to indicate one of several
types of ambiguous MIME content that could be security risks.
* Add the '@duplicate_parameters' pseudo-parameter to let caller
detect duplicate MIME parameters on a MIME header.
5.512 2024-01-08 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.512 RELEASED
* Use much larger chunk sizes for Base-64 encoding which reduces
both encoding time and space overhead.
https://rt.cpan.org/Ticket/Display.html?id=128400
https://rt.cpan.org/Ticket/Display.html?id=130110
* Wed Jan 03 2024 Tina Müller <timueller+perl@suse.de>
- updated to 5.511
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.511 2024-01-02 Dianne Skoll <dianne@skoll.ca>
* VERSION 5.511 RELEASED
* Silence a warning if used with a development version of
MIME::QuotedPrint
https://rt.cpan.org/Ticket/Display.html?id=150118
https://rt.cpan.org/Ticket/Display.html?id=149225
* Thu Jul 07 2022 Tina Müller <timueller+perl@suse.de>
- updated to 5.510
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
* Fri Apr 07 2017 coolo@suse.com
- updated to 5.509
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.509 2017-04-05 Dianne Skoll <dfs@roaringpenguin.com>
* VERSION 5.509 RELEASED
* Fix CPAN bug https://rt.cpan.org/Ticket/Display.html?id=120871
Makefile.PL fails with no '.' in @INC
* Fix CPAN bug https://rt.cpan.org/Ticket/Display.html?id=118262
Test t/Ref.t fails on Windows install
* Fix CPAN bug https://rt.cpan.org/Ticket/Display.html?id=119166
MIME::Parser::parse_data() should check what it gets back...
* Fix CPAN bug https://rt.cpan.org/Ticket/Display.html?id=119568
Allow
to be used as line-end delimeter when outputting MIME
message.
* Wed Aug 31 2016 coolo@suse.com
- updated to 5.508
see /usr/share/doc/packages/perl-MIME-tools/ChangeLog
5.508 2016-08-29 Dianne Skoll <dfs@roaringpenguin.com>
* VERSION 5.508 RELEASED
* Fix test broken by Perl update
https://rt.cpan.org/Ticket/Display.html?id=113887
* Mon May 30 2016 bwiedemann@suse.com
- Add MIME-tools-5.507-rt113887.patch from fedora
to fix test failure with new MailTools
/usr/lib/perl5/vendor_perl/5.44.0/MIME /usr/lib/perl5/vendor_perl/5.44.0/MIME/Body.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Decoder /usr/lib/perl5/vendor_perl/5.44.0/MIME/Decoder.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Decoder/Base64.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Decoder/BinHex.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Decoder/Binary.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Decoder/Gzip64.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Decoder/NBit.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Decoder/QuotedPrint.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Decoder/UU.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Entity.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Field /usr/lib/perl5/vendor_perl/5.44.0/MIME/Field/ConTraEnc.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Field/ContDisp.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Field/ContType.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Field/ParamVal.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Head.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Parser /usr/lib/perl5/vendor_perl/5.44.0/MIME/Parser.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Parser/Filer.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Parser/Reader.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Parser/Results.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Tools.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/WordDecoder.pm /usr/lib/perl5/vendor_perl/5.44.0/MIME/Words.pm /usr/share/doc/packages/perl-MIME-tools /usr/share/doc/packages/perl-MIME-tools/ChangeLog /usr/share/doc/packages/perl-MIME-tools/README /usr/share/doc/packages/perl-MIME-tools/examples /usr/share/doc/packages/perl-MIME-tools/examples/README /usr/share/doc/packages/perl-MIME-tools/examples/mimeabuse /usr/share/doc/packages/perl-MIME-tools/examples/mimedump /usr/share/doc/packages/perl-MIME-tools/examples/mimeencode /usr/share/doc/packages/perl-MIME-tools/examples/mimeexplode /usr/share/doc/packages/perl-MIME-tools/examples/mimepostcard /usr/share/doc/packages/perl-MIME-tools/examples/mimeprint /usr/share/doc/packages/perl-MIME-tools/examples/mimeref /usr/share/doc/packages/perl-MIME-tools/examples/mimesend /usr/share/doc/packages/perl-MIME-tools/examples/mimesender /usr/share/doc/packages/perl-MIME-tools/examples/mimetour /usr/share/licenses/perl-MIME-tools /usr/share/licenses/perl-MIME-tools/COPYING /usr/share/man/man3/MIME::Body.3pm.gz /usr/share/man/man3/MIME::Decoder.3pm.gz /usr/share/man/man3/MIME::Decoder::Base64.3pm.gz /usr/share/man/man3/MIME::Decoder::BinHex.3pm.gz /usr/share/man/man3/MIME::Decoder::Binary.3pm.gz /usr/share/man/man3/MIME::Decoder::Gzip64.3pm.gz /usr/share/man/man3/MIME::Decoder::NBit.3pm.gz /usr/share/man/man3/MIME::Decoder::QuotedPrint.3pm.gz /usr/share/man/man3/MIME::Decoder::UU.3pm.gz /usr/share/man/man3/MIME::Entity.3pm.gz /usr/share/man/man3/MIME::Field::ConTraEnc.3pm.gz /usr/share/man/man3/MIME::Field::ContDisp.3pm.gz /usr/share/man/man3/MIME::Field::ContType.3pm.gz /usr/share/man/man3/MIME::Field::ParamVal.3pm.gz /usr/share/man/man3/MIME::Head.3pm.gz /usr/share/man/man3/MIME::Parser.3pm.gz /usr/share/man/man3/MIME::Parser::Filer.3pm.gz /usr/share/man/man3/MIME::Parser::Reader.3pm.gz /usr/share/man/man3/MIME::Parser::Results.3pm.gz /usr/share/man/man3/MIME::Tools.3pm.gz /usr/share/man/man3/MIME::WordDecoder.3pm.gz /usr/share/man/man3/MIME::Words.3pm.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Thu Nov 12 01:28:40 2026