-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 21 Oct 2026 23:11:16 +0200
Source: libmime-tools-perl
Architecture: source
Version: 5.520-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa@debian.org>
Changes:
libmime-tools-perl (5.520-1) unstable; urgency=medium
.
* Import upstream version 5.520.
Fixes a potential DOS:
MIME::Parser used O(N^2) CPU time and memory parsing a MIME message
nested N levels deep. A smallish specially-crafted message could DOS the
computer by making it consume enormous amounts of memory and CPU time.
The parser was modified to use O(N) time and memory in this case.
Additionally, a new MIME::Parser::max_depth() function was added to
limit the nesting depth before declaring a parse failure.
Checksums-Sha1:
ee595c2f2f9849103b4616ed7a429ee323dae3b3 2659 libmime-tools-perl_5.520-1.dsc
fa674597e62b9d3a228e990667cda44178a51cad 435518 libmime-tools-perl_5.520.orig.tar.gz
356e7b1baa3910fc53460ff4ade88b782cd49c77 7776 libmime-tools-perl_5.520-1.debian.tar.xz
98e660f01a586c8a38b305d0551c6824c8acf8d5 658468 libmime-tools-perl_5.520-1.git.tar.xz
2d991d6d0ec02a8ef713245c9fa7343567d00c81 17768 libmime-tools-perl_5.520-1_source.buildinfo
Checksums-Sha256:
cf402d83abb9974971817cdad4d9390ebd16d62ee314c085c2086471100b9ecf 2659 libmime-tools-perl_5.520-1.dsc
bd03b35b931f583111211c2bed2c5cb09bc0e8432033b7a4c99b243789174334 435518 libmime-tools-perl_5.520.orig.tar.gz
5eaf2968134dcb3382cff9936a251ca26734bb4b8593e3853a77ca1e105c889e 7776 libmime-tools-perl_5.520-1.debian.tar.xz
93122dcc52ea1baf8e3ea9104bd13c11ffe20e397db934166d058a4aa672aa1a 658468 libmime-tools-perl_5.520-1.git.tar.xz
5ed89b7fb8e39d6925e5492b800916acf2d820e3d6d03fef4021bc6c57ae8120 17768 libmime-tools-perl_5.520-1_source.buildinfo
Files:
939505b5ccc9232b9709ebbc304141c4 2659 perl optional libmime-tools-perl_5.520-1.dsc
27aaf32fdb4151e5ec733c54428d8ef4 435518 perl optional libmime-tools-perl_5.520.orig.tar.gz
48fd66f43d74bc2b78fa6396eee1908d 7776 perl optional libmime-tools-perl_5.520-1.debian.tar.xz
dafaeae7149c5f66657eca548352b4ff 658468 perl None libmime-tools-perl_5.520-1.git.tar.xz
65414e24eb0b58e2e92ea2d0f4642abc 17768 perl optional libmime-tools-perl_5.520-1_source.buildinfo
Git-Tag-Info: tag=71e465f9c9dbdd42c9af9757d2544fbb7ac8a4d7 fp=d1e1316e93a760a8104d85fabb3a68018649aa06
Git-Tag-Tagger: gregor herrmann <gregoa@debian.org>
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmrZKzcACgkQYG0ITkaD
wHnizBAAkKAQ/VkqlhC6qoGYKgjc30iB1KNgo4Sqw4ytg/vm9RJ3OU5x9ScWzYPi
3e2RygDcb/+M6itFLiOsWnj2VWf1o8yroZSLGvzJn1PJ+uTkDydDbuh3zgoA1VCM
uLjRED8H80gRmD53ebcHtl/F2AiQM5OX7hUVbZ1H2LXEgpXlS7VjbbPNP1SRpble
OrjfmYagjfhAjqDUw7XRethefONKybW5cwfMgKqBjZRVzJ2udxijemJIW0c4DeeB
ndWs9UkuyQgU7FXxik01ypePDWhm39wIDsOsARvOnoFh/ZhozfIXeGx9tFWPibwg
XwKzmQc+P1HLN64YcK6/qBLf/7URJFrNxZMtsjXQf/wVGQ9Sq3WXi+lVgwKvxMOf
Ch1ZEkGOHe3+xhBVH219nWWofeu998YZ+2+UUbooyGe3xXdImXFYvsd+t8xt03Mc
IGtFvP7WLTRMsUrVAiovYm4txvwhCpYIqMSTCH7JY6okrZ3BlhMe7etobllkcBgX
e8O+vLXG63hpaUdyWZRzTMTGFPZB5rHnQ2zaq9yQEWW/m2bSGph0Rfr5+3DCP3aJ
+34CvxJ0QJZznRgZCvj/ECK4Jx6Cm/N1Ng3GlcV2cLBnud0PfQqW+/kWXTgu03ji
KudghYAb/k9a9Sw9woJJCJSUpRI3CnT66loi2zYO5g0AQWwr5Ck=
=vNEO
-----END PGP SIGNATURE-----
