{"id":"MGASA-2021-0078","aliases":[],"status":"published","title":"Updated perl-Email-MIME and perl-Email-MIME-ContentType packages fix security vulnerability","description":"Messages with too many tiny nested MIME parts can lead to memory exhaustion on\nsplit(), resulting in denial of service (rhbz#1835353)\n\nThis update limits the number of nested MIME parts to 10 (by default), to avoid\na possible memory exhaustion issue with lots of tiny MIME parts.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-02-10T18:41:52Z","modified":"2026-04-16T04:25:08Z","fixes":[{"ecosystem":"Mageia:7","package":"perl-Email-MIME","fixed_in":["1.949.0-3.1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"perl-Email-MIME-ContentType","fixed_in":["1.24.0-3.1.mga7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:7","package":"perl-Email-MIME","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.949.0-3.1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"perl-Email-MIME-ContentType","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-3.1.mga7"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2021-0078.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26757","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/VJFUIVJOQGZOYF4Q4RXPBJTBBZD5LXVK/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/3PWODHVD5ZKQBY2OYBTFPBETUOOJA33D/","tags":["web"]}],"sources":{"osv":[{"id":"MGASA-2021-0078","title":"Updated perl-Email-MIME and perl-Email-MIME-ContentType packages fix security vulnerability","description":"Messages with too many tiny nested MIME parts can lead to memory exhaustion on\nsplit(), resulting in denial of service (rhbz#1835353)\n\nThis update limits the number of nested MIME parts to 10 (by default), to avoid\na possible memory exhaustion issue with lots of tiny MIME parts.\n","status":"published","published":"2021-02-10T18:41:52Z","modified":"2026-04-16T04:25:08.575555Z","updated_at":"2026-11-02T15:49:41.509337Z"}]}}