v1.954

- Fix for CVE-2024-4140: An excessive memory use issue (CWE-770) exists in Email-MIME, before version 1.954, which can cause denial of service when parsing multipart MIME messages. The fix is the new $MAX_PARTS configuration limits how many parts we will consider parsing. The default $MAX_PARTS is 100.
rjbs · May 2, 2024 · d339016 · d339016
1 parent 88cfc99
commit d339016
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/Changes b/Changes
@@ -1,6 +1,8 @@
 Revision history for Perl extension Email::MIME.
 
 {{$NEXT}}
+
+1.954     2024-05-02 17:12:30-04:00 America/New_York
         - Fix for CVE-2024-4140: An excessive memory use issue (CWE-770)
           exists in Email-MIME, before version 1.954, which can cause denial of
           service when parsing multipart MIME messages.  The fix is the new