Fedora Account System
Red Hat Associate
Red Hat Customer
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested comment. A parameter written boundary((c))="A" or boundary(\))="A" is stored under that literal name rather than as boundary. A second boundary parameter is then not reported as a duplicate, and MIME::Parser splits the message on it. Readers that skip comments as RFC 5322 allows take the first boundary instead. A remote sender can hide an attachment from a filter that relies on ambiguous_content() while the recipient's mail client shows it.
FEDORA-2026-51fdfb7476 (perl-MIME-tools-5.522-1.fc45) has been submitted as an update to Fedora 45. https://bodhi.fedoraproject.org/updates/FEDORA-2026-51fdfb7476
FEDORA-2026-0e79d6ad13 (perl-MIME-tools-5.522-1.fc44) has been submitted as an update to Fedora 44. https://bodhi.fedoraproject.org/updates/FEDORA-2026-0e79d6ad13
FEDORA-2026-a415b3bf48 (perl-MIME-tools-5.522-1.fc43) has been submitted as an update to Fedora 43. https://bodhi.fedoraproject.org/updates/FEDORA-2026-a415b3bf48
FEDORA-2026-51fdfb7476 (perl-MIME-tools-5.522-1.fc45) has been pushed to the Fedora 45 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2026-0e79d6ad13 (perl-MIME-tools-5.522-1.fc44) has been pushed to the Fedora 44 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2026-a415b3bf48 (perl-MIME-tools-5.522-1.fc43) has been pushed to the Fedora 43 stable repository. If problem still persists, please make note of it in this bug report.