libmime-tools-perl_5.522-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 27 Oct 2026 23:49:04 +0100
Source: libmime-tools-perl
Architecture: source
Version: 5.522-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers at lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa at debian.org>
Closes: 1152317
Changes:
 libmime-tools-perl (5.522-1) unstable; urgency=medium
 .
   * Import upstream version 5.522.
     Contains fixes for:
     - CVE-2026-116264 invalid parameter hides boundary/filename
     - CVE-2026-116265 RFC 2231 boundary skips ambiguity checks
     - CVE-2026-116266 boundary changed by decoding not flagged
     - CVE-2026-116267 indent stored per message per level
     - CVE-2026-116268 unclosed "(" comments backtrack CPU exhaustion
     - CVE-2026-116269 RFC 2231 language tag empties filename
     - CVE-2026-116270 each bad "=?" copies the input into $@
     - CVE-2026-116271 FileUnder reuses a pre-created directory
     - CVE-2026-116272 comment hides a duplicate boundary
     - CVE-2026-116273 max_parts and max_depth unlimited
     Closes: #1152317
   * Add note about behaviour change to debian/NEWS.Developer.
Checksums-Sha1:
 b894cc8ad4ffb88ad3adca0f8154c5c8a9583a92 2659 libmime-tools-perl_5.522-1.dsc
 1082ac44e82e16e168892cf9feaf8bac4826cba3 441525 libmime-tools-perl_5.522.orig.tar.gz
 bb010b898f5d43750d12d3d2443dadc5a31e1c67 8240 libmime-tools-perl_5.522-1.debian.tar.xz
 4b1cbc46f754b544871067a152ee2bfb1e5e6dda 680284 libmime-tools-perl_5.522-1.git.tar.xz
 84a9935131a4f409838a0aa91826ca2ce3bb0cfe 17776 libmime-tools-perl_5.522-1_source.buildinfo
Checksums-Sha256:
 d0b837544406a3f15782e25f994cdce0f56807c5f1e8433058b98854451b3d74 2659 libmime-tools-perl_5.522-1.dsc
 cd07b53d481d198696c02c62f034bc10468eab157440515de0025e80b0f4933f 441525 libmime-tools-perl_5.522.orig.tar.gz
 79cf539a4fa070c560d1d8f1fa90dd19c42c4c8598ee09d3177b23ffdcf24098 8240 libmime-tools-perl_5.522-1.debian.tar.xz
 9c7d294cff812cc3ab334416dda870cc9bb961c1b3f9e9a56f04a3e869e4b43d 680284 libmime-tools-perl_5.522-1.git.tar.xz
 ea75b0eae70a1bffcf6b5b1c0e354057135f116ff62aa797c7237b0e90a6ab78 17776 libmime-tools-perl_5.522-1_source.buildinfo
Files:
 c8a559749f811cfa582108c4246227c9 2659 perl optional libmime-tools-perl_5.522-1.dsc
 2d236c83a23c5ac8beaf1011e77c2d6e 441525 perl optional libmime-tools-perl_5.522.orig.tar.gz
 a9d0bd45c6b846e9cf5eaf76d99c846b 8240 perl optional libmime-tools-perl_5.522-1.debian.tar.xz
 d06ca49d3aa353c16279c58afd0b2b41 680284 perl None libmime-tools-perl_5.522-1.git.tar.xz
 bef9835418999845e4161bfd08c027d7 17776 perl optional libmime-tools-perl_5.522-1_source.buildinfo
Git-Tag-Info: tag=53c1957c40a11f24715533b40a350bbf511d0512 fp=d1e1316e93a760a8104d85fabb3a68018649aa06
Git-Tag-Tagger: gregor herrmann <gregoa at debian.org>

-----BEGIN PGP SIGNATURE-----
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=/5dS
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20261027/d4bf18dc/attachment-0001.sig>