Fedora Linux 8811 Published by

A perl-Email-MIME-ContentType security update has been released for Fedora 32.



SECURITY: Fedora 32 Update: perl-Email-MIME-ContentType-1.024-1.fc32


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-22764f623f
2020-06-03 01:49:08.906409
--------------------------------------------------------------------------------

Name : perl-Email-MIME-ContentType
Product : Fedora 32
Version : 1.024
Release : 1.fc32
URL :   https://metacpan.org/release/Email-MIME-ContentType
Summary : Parse a MIME Content-Type Header
Description :
This module is responsible for parsing email content type headers according
to section 5.1 of RFC 2045. It returns a hash with entries for the type, the
subtype, and a hash of attributes.

For backward compatibility with a really unfortunate misunderstanding of RFC
2045 by the early implementors of this module, 'discrete' and 'composite' are
also present in the returned hashref, with the values of 'type' and 'subtype'
respectively.

--------------------------------------------------------------------------------
Update Information:

This update limits the number of nested MIME parts to 10 (by default), to avoid
a possible memory exhaustion issue with lots of tiny MIME parts.
--------------------------------------------------------------------------------
ChangeLog:

* Sun May 24 2020 Paul Howarth - 1.024-1
- Update to 1.024
- Silence an uninitialized value warning
- Avoid allowing non-Latin digits in numbers
- Add new functions build_content_type() and build_content_disposition()
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #1835353 - rubygem-mail: Out of memory issue through nested MIME parts
  https://bugzilla.redhat.com/show_bug.cgi?id=1835353
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-22764f623f' at the command
line. For more information, refer to the dnf documentation available at
  http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
  https://fedoraproject.org/keys