MGASA-2021-0078
- Source
- https://advisories.mageia.org/MGASA-2021-0078.html
- Import Source
- https://advisories.mageia.org/MGASA-2021-0078.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2021-0078
- Published
- 2021-02-10T18:41:52Z
- Modified
- 2026-04-16T04:25:08.575555Z
- Summary
- Updated perl-Email-MIME and perl-Email-MIME-ContentType packages fix security vulnerability
- Details
-
Messages with too many tiny nested MIME parts can lead to memory exhaustion on split(), resulting in denial of service (rhbz#1835353)
This update limits the number of nested MIME parts to 10 (by default), to avoid a possible memory exhaustion issue with lots of tiny MIME parts.
- References
-
- https://advisories.mageia.org/MGASA-2021-0078.html
- https://bugs.mageia.org/show_bug.cgi?id=26757
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/VJFUIVJOQGZOYF4Q4RXPBJTBBZD5LXVK/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/3PWODHVD5ZKQBY2OYBTFPBETUOOJA33D/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:7 / perl-Email-MIME
Package
- Name
- perl-Email-MIME
- Purl
- pkg:rpm/mageia/perl-Email-MIME?arch=source&distro=mageia-7
Mageia:7 / perl-Email-MIME-ContentType
Package
- Name
- perl-Email-MIME-ContentType
- Purl
- pkg:rpm/mageia/perl-Email-MIME-ContentType?arch=source&distro=mageia-7