https://bugzilla.redhat.com/show_bug.cgi?id=1835353
Bug ID: 1835353
Summary: rubygem-mail: Out of memory issue through nested MIME
parts
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-t...@redhat.com
Reporter: psamp...@redhat.com
CC: aka...@redhat.com, al...@redhat.com,
bbucking...@redhat.com, bco...@redhat.com,
bkear...@redhat.com, bto...@redhat.com,
caillon+fedoraproj...@gmail.com, caol...@redhat.com,
dmetz...@redhat.com, gmccu...@redhat.com,
gnome-...@lists.fedoraproject.org,
gtanz...@redhat.com, hhudg...@redhat.com,
jf...@redhat.com, jha...@redhat.com,
john.j5l...@gmail.com, jose.p.oliveira....@gmail.com,
l...@redhat.com, mcla...@redhat.com,
mmcc...@redhat.com, nmoum...@redhat.com,
obare...@redhat.com, p...@city-fan.org,
perl-devel@lists.fedoraproject.org, rc...@redhat.com,
rhug...@redhat.com, rjerr...@redhat.com,
rob.my...@gtri.gatech.edu, roliv...@redhat.com,
rstr...@redhat.com, sandm...@redhat.com,
simai...@redhat.com, small...@redhat.com,
sokee...@redhat.com, tbris...@redhat.com,
tcall...@redhat.com, vondr...@redhat.com,
walter.p...@yandex.com, xav...@bachelot.org
Target Milestone: ---
Classification: Other
A possible DoS issue may affect several MIME parsers. Messages with too many
tiny nested MIME parts can lead to memory exhaustion on split().
References:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960064
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960062
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960159
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960158
--
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
perl-devel mailing list -- perl-devel@lists.fedoraproject.org
To unsubscribe send an email to perl-devel-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/perl-devel@lists.fedoraproject.org
