Opened 3 years ago

Closed 3 years ago

#10950 closed enhancement (fixed)

mutt-1.10.1

Reported by: ken@… Owned by: ken@…
Priority: normal Milestone: 8.3
Component: BOOK Version: SVN
Severity: normal Keywords:
Cc:

Description

From Kevin J. McCarthy on mutt-announce:

Hi Mutt Users,

I've just released version 1.10.1. Instructions for downloading can be found at <http://www.mutt.org/download.html>. This is a bug fix release, and includes a few important security fixes. I strongly recommend IMAP and POP users upgrade as soon as possible.

This release merits special thanks to a couple security researchers.

Jeriko One discovered a host of vulnerabilities in the IMAP and POP code. His bug reports were detailed, and included demonstration code and suggested fixes.

Marcus Brinkmann discovered an issue with encrypted email spoofing, and reported the issue to GnuPG and Mutt. There is a new option $pgp_check_gpg_decrypt_status_fd to check for this. If you have any issues, please check your configuration against contrib/gpg.rc.

Also, thanks is due to Richard Russon. An unfortunately timed absence left me scrambling to get the fixes in. Richard kindly shared his patches and delayed his release until today, to give me time to prepare the release.

Change History (2)

comment:1 by ken@…, 3 years ago

Owner: changed from blfs-book to ken@…
Status: newassigned

comment:2 by ken@…, 3 years ago

Resolution: fixed
Status: assignedclosed
Note: See TracTickets for help on using tickets.