Re: Security report: 8 memory-safety vulnerabilities in GNU Mailutils (base64/IMAP-literal/URL/header/mbox/maildir), ASAN-confirmed on 3.21

"Neil R. Ormos" <[email protected]> Tue, 16 Jun 2026 10:20:03 -0500 (CDT)
Newsgroups gmane.comp.gnu.mailutils.bugs
Message-ID <[email protected]>
zhangph wrote:

> Hello GNU Mailutils maintainers,

> I am reporting 8 memory-safety vulnerabilities I
> found in GNU Mailutils 3.21 [...] 
> I am disclosing them to you under coordinated
> disclosure and have not made them public.

The <[email protected]> address is not a "private line" to the Mailutils maintainer.

E-mail to that address is redistributed to a mailing list, with many subscribers who are not Mailutils maintainers.

Moreover, there is a web archive that anyone may access without a subscription.