[From nobody Tue Oct 27 23:13:06 2026 Received: (at 1152317-close) by bugs.debian.org; 27 Oct 2026 23:11:24 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.0 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 151; hammy, 150; neutral, 164; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:39318) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xLqKC-00Ct7k-1w for 1152317-close@bugs.debian.org; Tue, 27 Oct 2026 23:11:23 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xLqKA-009Ndq-15 for 1152317-close@bugs.debian.org; Tue, 27 Oct 2026 23:11:22 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=lX1UGiUNNVkGV1Ug2zGSzlgQFvIxvF6OM+9VeamVQzM=; b=M795alRr9/baig1+alfmZRLs2y brHLZCxewokEwCDcKBkFPmyVo1QBgbtwEmQxde+ffgXhn+rgH7OTNVx2GaM98T2yoJEGIVKF8XugB cD10k/uznoa9Gdn85RJ8i2XlGJjtiZmjYArHAOBTavVA9M5ZNGKXa0B2nNj8R3FYKce9/txa/YCl3 xEhlJSd67xS7CrRPv0VIkRd3Pm2ErT6ZbmJBfdwmUFGv9IQJmf0X0dLHACkbwGmWhwO/xeDMFROsu 8sJM9MiDkOYsWthqBht3ypWDwjB7Wlir5y1YgXiv4jCpmwdFMzugVC9DzYpc6hExmGJQvocjCSt06 9eUOQxrA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xLqK9-00000003Wgw-0bkI; Tue, 27 Oct 2026 23:11:21 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: gregor herrmann <gregoa@debian.org> To: 1152317-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libmime-tools-perl Debian: DAK Debian-Changes: libmime-tools-perl_5.522-1_source.changes Debian-Source: libmime-tools-perl Debian-Version: 5.522-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1152317: fixed in libmime-tools-perl 5.522-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============5043965341144578613==" Message-Id: <E1xLqK9-00000003Wgw-0bkI@fasolo.debian.org> Date: Tue, 27 Oct 2026 23:11:21 +0000 --===============5043965341144578613== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libmime-tools-perl Source-Version: 5.522-1 Done: gregor herrmann <gregoa@debian.org> We believe that the bug you reported is fixed in the latest version of libmime-tools-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1152317@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. gregor herrmann <gregoa@debian.org> (supplier of updated libmime-tools-perl p= ackage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 27 Oct 2026 23:49:04 +0100 Source: libmime-tools-perl Architecture: source Version: 5.522-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: gregor herrmann <gregoa@debian.org> Closes: 1152317 Changes: libmime-tools-perl (5.522-1) unstable; urgency=3Dmedium . * Import upstream version 5.522. Contains fixes for: - CVE-2026-116264 invalid parameter hides boundary/filename - CVE-2026-116265 RFC 2231 boundary skips ambiguity checks - CVE-2026-116266 boundary changed by decoding not flagged - CVE-2026-116267 indent stored per message per level - CVE-2026-116268 unclosed "(" comments backtrack CPU exhaustion - CVE-2026-116269 RFC 2231 language tag empties filename - CVE-2026-116270 each bad "=3D?" copies the input into $@ - CVE-2026-116271 FileUnder reuses a pre-created directory - CVE-2026-116272 comment hides a duplicate boundary - CVE-2026-116273 max_parts and max_depth unlimited Closes: #1152317 * Add note about behaviour change to debian/NEWS.Developer. Checksums-Sha1: b894cc8ad4ffb88ad3adca0f8154c5c8a9583a92 2659 libmime-tools-perl_5.522-1.dsc 1082ac44e82e16e168892cf9feaf8bac4826cba3 441525 libmime-tools-perl_5.522.ori= g.tar.gz bb010b898f5d43750d12d3d2443dadc5a31e1c67 8240 libmime-tools-perl_5.522-1.deb= ian.tar.xz 4b1cbc46f754b544871067a152ee2bfb1e5e6dda 680284 libmime-tools-perl_5.522-1.g= it.tar.xz 84a9935131a4f409838a0aa91826ca2ce3bb0cfe 17776 libmime-tools-perl_5.522-1_so= urce.buildinfo Checksums-Sha256: d0b837544406a3f15782e25f994cdce0f56807c5f1e8433058b98854451b3d74 2659 libmim= e-tools-perl_5.522-1.dsc cd07b53d481d198696c02c62f034bc10468eab157440515de0025e80b0f4933f 441525 libm= ime-tools-perl_5.522.orig.tar.gz 79cf539a4fa070c560d1d8f1fa90dd19c42c4c8598ee09d3177b23ffdcf24098 8240 libmim= e-tools-perl_5.522-1.debian.tar.xz 9c7d294cff812cc3ab334416dda870cc9bb961c1b3f9e9a56f04a3e869e4b43d 680284 libm= ime-tools-perl_5.522-1.git.tar.xz ea75b0eae70a1bffcf6b5b1c0e354057135f116ff62aa797c7237b0e90a6ab78 17776 libmi= me-tools-perl_5.522-1_source.buildinfo Files: c8a559749f811cfa582108c4246227c9 2659 perl optional libmime-tools-perl_5.522= -1.dsc 2d236c83a23c5ac8beaf1011e77c2d6e 441525 perl optional libmime-tools-perl_5.5= 22.orig.tar.gz a9d0bd45c6b846e9cf5eaf76d99c846b 8240 perl optional libmime-tools-perl_5.522= -1.debian.tar.xz d06ca49d3aa353c16279c58afd0b2b41 680284 perl None libmime-tools-perl_5.522-1= .git.tar.xz bef9835418999845e4161bfd08c027d7 17776 perl optional libmime-tools-perl_5.52= 2-1_source.buildinfo Git-Tag-Info: tag=3D53c1957c40a11f24715533b40a350bbf511d0512 fp=3Dd1e1316e93a= 760a8104d85fabb3a68018649aa06 Git-Tag-Tagger: gregor herrmann <gregoa@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmrhK5YACgkQYG0ITkaD wHkeaxAAl4ZTAWhATWQX5JhSt2FT+Zedm5h32AC7Qr6GCetGj7q3nfGScj8nrtvg ZC2dqjCQj4cO/c/XScDFYS+Pj9G7am8pSMLa4xsMJjylZRTHbb12bt85PvexMNyu FM6QRac6IyAdplrNzpVOlQaTS67YpCnSp2avbD8MciqIRqaK+dREaGW1i4AZwjYK TiDiDmE/fq8dzlzXfXSbXnNd1BIWFKLygypPNeN8evvgAl4WGxbt9swdxhdp8p6r 8kKIM7fIYI30m7RfcAjzYQh85UYvxRKXNybaNbyFI+eRqr4q+VET+FXbOI3mRCqE xc8L71vkLkad2p/dm980QypKAAWHRcF+PenPqRV0AcYFx1aq98bzvUs65mE2WXDC pn8TDsZ4q5PhnLd1zg57JC864fM27QgCwiAac8CuE8b8UJvcn924QLX9ddaxe0lN aUkx0ASX67ETUQSJa4VGypVZ8FEtRdtcwZfgzqNve0YGMjxRkMDKDYQv2ru64fac d405P/V0/0xo7m0ZoI90OogtbLYMmC+FjRoZa75lxv/VlpbO8Lt9n8svq1k8tmHK vxHzWOgnYiFJVS7I/fmxcVdaM/Z/Av/jVhn6WZ0bsUlfwNLatiZ3ZGDJzwtJaf4m Qz18nnYLfOT/ynZPf7UKJss5V6yp+Aqjfq8qXK8fVwi+ijIPPfw=3D =3D/5dS -----END PGP SIGNATURE----- --===============5043965341144578613== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCauEvmQAKCRCb9qggYcy5 ISDUAQC3ruDn/sgpWKZbA+Yw/YhxPn73CKvZNkOuK4it7tYMxwEAqbO2DCBSQhCr p3dBHWYC7WjoFyF2bU2Eu6LZPAo4fwU= =3ojv -----END PGP SIGNATURE----- --===============5043965341144578613==-- ]