From 004af142c2a3c4c4d7c32d76001769be0609e0b1 Mon Sep 17 00:00:00 2001 From: Jeffrey Stedfast Date: Thu, 14 Nov 2019 09:14:19 -0500 Subject: bumped version to 3.2.5 --- NEWS | 17 +++++++++++++++++ configure.ac | 4 ++-- 2 files changed, 19 insertions(+), 2 deletions(-) diff --git a/NEWS b/NEWS index e7cc223a..cedbea5c 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,20 @@ +### GMime 3.2.5 + +* Modified GMimeParser to prevent stack overflows when parsing deeply nested messages. + + GMimeParser now has a limit on how deep multipart and/or message/rfc822 MIME part + nesting is allowed to go before the parser will take action to prevent a stack + overflow. If the max level is reached at a message/rfc822 part, then that part + will be consumed by the parser as a generic GMimePart rather than a + GMimeMessagePart. Likewise, if the max level is reached at any type of multipart, + then the content of said multipart will be packed into the GMimeMultipart's + preface and not parsed any further. + +* g_mime_multipart_foreach has been rewritten to avoid recursion, thereby avoiding potential + stack overflows. + +* The gmime-port-2-6-to-3-0.sh script has been fixed to use proper sed syntax. + ### GMime 3.2.4 * Replaced calls to g_memmove with memmove. diff --git a/configure.ac b/configure.ac index 204be0af..4c795048 100644 --- a/configure.ac +++ b/configure.ac @@ -12,8 +12,8 @@ AC_PREREQ(2.54) # m4_define([gmime_major_version], [3]) m4_define([gmime_minor_version], [2]) -m4_define([gmime_micro_version], [4]) -m4_define([gmime_interface_age], [3]) +m4_define([gmime_micro_version], [5]) +m4_define([gmime_interface_age], [4]) m4_define([gmime_binary_age], [m4_eval(100 * gmime_minor_version + gmime_micro_version)]) m4_define([gmime_version], -- cgit v1.2.1