Content-Transfer-Encoding: 7bit
Content-Type: multipart/mixed; boundary="_----------=_171489292490180"
MIME-Version: 1.0
Date: Sun, 5 May 2024 07:08:44 +0000
From: "Thomas Klausner" <wiz@netbsd.org>
Subject: CVS commit: pkgsrc/mail/p5-Email-MIME
To: pkgsrc-changes@NetBSD.org
Reply-To: wiz@netbsd.org
Message-Id: <20240505070844.E1DF6FA2C@cvs.NetBSD.org>
Sender: pkgsrc-changes-owner@NetBSD.org
Precedence: bulk

This is a multi-part message in MIME format.

--_----------=_171489292490180
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"

Module Name:	pkgsrc
Committed By:	wiz
Date:		Sun May  5 07:08:44 UTC 2024

Modified Files:
	pkgsrc/mail/p5-Email-MIME: Makefile distinfo

Log Message:
p5-Email-MIME: update to 1.954.

1.954     2024-05-02 17:12:30-04:00 America/New_York
        - Fix for CVE-2024-4140: An excessive memory use issue (CWE-770)
          exists in Email-MIME, before version 1.954, which can cause denial of
          service when parsing multipart MIME messages.  The fix is the new
          $MAX_PARTS configuration limits how many parts we will consider
          parsing.  The default $MAX_PARTS is 100.


To generate a diff of this commit:
cvs rdiff -u -r1.41 -r1.42 pkgsrc/mail/p5-Email-MIME/Makefile
cvs rdiff -u -r1.22 -r1.23 pkgsrc/mail/p5-Email-MIME/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.


--_----------=_171489292490180
Content-Disposition: inline
Content-Length: 1614
Content-Transfer-Encoding: binary
Content-Type: text/x-diff; charset=us-ascii

Modified files:

Index: pkgsrc/mail/p5-Email-MIME/Makefile
diff -u pkgsrc/mail/p5-Email-MIME/Makefile:1.41 pkgsrc/mail/p5-Email-MIME/Makefile:1.42
--- pkgsrc/mail/p5-Email-MIME/Makefile:1.41	Thu Jul  6 09:40:43 2023
+++ pkgsrc/mail/p5-Email-MIME/Makefile	Sun May  5 07:08:44 2024
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.41 2023/07/06 09:40:43 wiz Exp $
+# $NetBSD: Makefile,v 1.42 2024/05/05 07:08:44 wiz Exp $
 
-DISTNAME=		Email-MIME-1.953
+DISTNAME=		Email-MIME-1.954
 PKGNAME=		p5-${DISTNAME}
-PKGREVISION=		1
 CATEGORIES=		mail perl5
 MASTER_SITES=		${MASTER_SITE_PERL_CPAN:=Email/}
 

Index: pkgsrc/mail/p5-Email-MIME/distinfo
diff -u pkgsrc/mail/p5-Email-MIME/distinfo:1.22 pkgsrc/mail/p5-Email-MIME/distinfo:1.23
--- pkgsrc/mail/p5-Email-MIME/distinfo:1.22	Fri Jan 27 03:51:42 2023
+++ pkgsrc/mail/p5-Email-MIME/distinfo	Sun May  5 07:08:44 2024
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.22 2023/01/27 03:51:42 wen Exp $
+$NetBSD: distinfo,v 1.23 2024/05/05 07:08:44 wiz Exp $
 
-BLAKE2s (Email-MIME-1.953.tar.gz) = 5872f463adf45c9d8ae5cb772399cee39ee003ebbddf9490a8a6d7cb2dc3317e
-SHA512 (Email-MIME-1.953.tar.gz) = d88704c7f0173198f94180da81beacaad6ea675e3fcd525f92df7c06a85df8664295c63f71ad6aa14ec517f101f23449e6c3818bbd951c1257b8d0080530c5f7
-Size (Email-MIME-1.953.tar.gz) = 124368 bytes
+BLAKE2s (Email-MIME-1.954.tar.gz) = df32e1c9ac703c85c957a7e6ed8fc14f28b9e2c49485a2ed1280eabe65dc40dc
+SHA512 (Email-MIME-1.954.tar.gz) = 2f144796ba716cec199e17b19f1d93ec9571f922c7d3b9c6939b81e0e91e315de8558d2a28c9a879b41ee9cd959452cfec74b1d7843110a5f23bc27cba482f22
+Size (Email-MIME-1.954.tar.gz) = 125093 bytes


--_----------=_171489292490180--