-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 27 Oct 2026 23:49:04 +0100 Source: libmime-tools-perl Architecture: source Version: 5.522-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1152317 Changes: libmime-tools-perl (5.522-1) unstable; urgency=medium . * Import upstream version 5.522. Contains fixes for: - CVE-2026-116264 invalid parameter hides boundary/filename - CVE-2026-116265 RFC 2231 boundary skips ambiguity checks - CVE-2026-116266 boundary changed by decoding not flagged - CVE-2026-116267 indent stored per message per level - CVE-2026-116268 unclosed "(" comments backtrack CPU exhaustion - CVE-2026-116269 RFC 2231 language tag empties filename - CVE-2026-116270 each bad "=?" copies the input into $@ - CVE-2026-116271 FileUnder reuses a pre-created directory - CVE-2026-116272 comment hides a duplicate boundary - CVE-2026-116273 max_parts and max_depth unlimited Closes: #1152317 * Add note about behaviour change to debian/NEWS.Developer. Checksums-Sha1: b894cc8ad4ffb88ad3adca0f8154c5c8a9583a92 2659 libmime-tools-perl_5.522-1.dsc 1082ac44e82e16e168892cf9feaf8bac4826cba3 441525 libmime-tools-perl_5.522.orig.tar.gz bb010b898f5d43750d12d3d2443dadc5a31e1c67 8240 libmime-tools-perl_5.522-1.debian.tar.xz 4b1cbc46f754b544871067a152ee2bfb1e5e6dda 680284 libmime-tools-perl_5.522-1.git.tar.xz 84a9935131a4f409838a0aa91826ca2ce3bb0cfe 17776 libmime-tools-perl_5.522-1_source.buildinfo Checksums-Sha256: d0b837544406a3f15782e25f994cdce0f56807c5f1e8433058b98854451b3d74 2659 libmime-tools-perl_5.522-1.dsc cd07b53d481d198696c02c62f034bc10468eab157440515de0025e80b0f4933f 441525 libmime-tools-perl_5.522.orig.tar.gz 79cf539a4fa070c560d1d8f1fa90dd19c42c4c8598ee09d3177b23ffdcf24098 8240 libmime-tools-perl_5.522-1.debian.tar.xz 9c7d294cff812cc3ab334416dda870cc9bb961c1b3f9e9a56f04a3e869e4b43d 680284 libmime-tools-perl_5.522-1.git.tar.xz ea75b0eae70a1bffcf6b5b1c0e354057135f116ff62aa797c7237b0e90a6ab78 17776 libmime-tools-perl_5.522-1_source.buildinfo Files: c8a559749f811cfa582108c4246227c9 2659 perl optional libmime-tools-perl_5.522-1.dsc 2d236c83a23c5ac8beaf1011e77c2d6e 441525 perl optional libmime-tools-perl_5.522.orig.tar.gz a9d0bd45c6b846e9cf5eaf76d99c846b 8240 perl optional libmime-tools-perl_5.522-1.debian.tar.xz d06ca49d3aa353c16279c58afd0b2b41 680284 perl None libmime-tools-perl_5.522-1.git.tar.xz bef9835418999845e4161bfd08c027d7 17776 perl optional libmime-tools-perl_5.522-1_source.buildinfo Git-Tag-Info: tag=53c1957c40a11f24715533b40a350bbf511d0512 fp=d1e1316e93a760a8104d85fabb3a68018649aa06 Git-Tag-Tagger: gregor herrmann <gregoa@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmrhK5YACgkQYG0ITkaD wHkeaxAAl4ZTAWhATWQX5JhSt2FT+Zedm5h32AC7Qr6GCetGj7q3nfGScj8nrtvg ZC2dqjCQj4cO/c/XScDFYS+Pj9G7am8pSMLa4xsMJjylZRTHbb12bt85PvexMNyu FM6QRac6IyAdplrNzpVOlQaTS67YpCnSp2avbD8MciqIRqaK+dREaGW1i4AZwjYK TiDiDmE/fq8dzlzXfXSbXnNd1BIWFKLygypPNeN8evvgAl4WGxbt9swdxhdp8p6r 8kKIM7fIYI30m7RfcAjzYQh85UYvxRKXNybaNbyFI+eRqr4q+VET+FXbOI3mRCqE xc8L71vkLkad2p/dm980QypKAAWHRcF+PenPqRV0AcYFx1aq98bzvUs65mE2WXDC pn8TDsZ4q5PhnLd1zg57JC864fM27QgCwiAac8CuE8b8UJvcn924QLX9ddaxe0lN aUkx0ASX67ETUQSJa4VGypVZ8FEtRdtcwZfgzqNve0YGMjxRkMDKDYQv2ru64fac d405P/V0/0xo7m0ZoI90OogtbLYMmC+FjRoZa75lxv/VlpbO8Lt9n8svq1k8tmHK vxHzWOgnYiFJVS7I/fmxcVdaM/Z/Av/jVhn6WZ0bsUlfwNLatiZ3ZGDJzwtJaf4m Qz18nnYLfOT/ynZPf7UKJss5V6yp+Aqjfq8qXK8fVwi+ijIPPfw= =/5dS -----END PGP SIGNATURE-----