mutt 1.14.3 released

--opJtzjQTFsWo+cga
Content-Type: text/plain; charset=iso-8859-1; format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello Mutt Users,

I've just released version 1.14.3.  Instructions for downloading are=20
available at <http://www.mutt.org/download.html>, or the tarball can be=20
directly downloaded from <http://ftp.mutt.org/pub/mutt/>.  Please take=20
the time to verify the signature file against my public key.

This is an important security release fixing two issues.

The first is a possible IMAP man-in-the-middle attack.  No credentials=20
are exposed, but could result in unintended emails being "saved" to an=20
attacker's server.  The $ssl_starttls quadoption is now used to check=20
for an unencrypted PREAUTH response from the server.

Thanks very much to Damian Poddebniak and Fabian Ising from the M=FCnster=
=20
University of Applied Sciences for reporting this issue, and their help=20
in testing the fix.

The second fix is for a problem with GnuTLS certificate prompting.=20
"Rejecting" an expired intermediate cert did not terminate the=20
connection.  Thanks to @henk on IRC for reporting the issue.

-Kevin

--opJtzjQTFsWo+cga
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=xYLs
-----END PGP SIGNATURE-----

--opJtzjQTFsWo+cga--