mutt 1.10.1 released

"Kevin J. McCarthy" <[email protected]> Mon, 16 Jul 2018 11:03:27 -0700
Newsgroups gmane.mail.mutt.announce
Message-ID <[email protected]>
--cvVnyQ+4j833TQvp
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Hi Mutt Users,

I've just released version 1.10.1.  Instructions for downloading can be
found at <http://www.mutt.org/download.html>.

This is a bug fix release, and includes a few important security fixes.
I strongly recommend IMAP and POP users upgrade as soon as possible.

This release merits special thanks to a couple security researchers.

Jeriko One discovered a host of vulnerabilities in the IMAP and POP
code.  His bug reports were detailed, and included demonstration code
and suggested fixes.

Marcus Brinkmann discovered an issue with encrypted email spoofing, and
reported the issue to GnuPG and Mutt.  There is a new option
$pgp_check_gpg_decrypt_status_fd to check for this.  If you have any
issues, please check your configuration against contrib/gpg.rc.

Also, thanks is due to Richard Russon.  An unfortunately timed absence
left me scrambling to get the fixes in.  Richard kindly shared his
patches and delayed his release until today, to give me time to prepare
the release.

Lastly, a big thanks to everyone who helped work on this release!

-Kevin

--cvVnyQ+4j833TQvp
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=K1ZZ
-----END PGP SIGNATURE-----

--cvVnyQ+4j833TQvp--