Re: CVE status and regression in 1.14.3 release

--WIyZ46R2i8wDzkSu
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Jun 20, 2020 at 02:49:56PM -0700, Kevin J. McCarthy wrote:
>In the release for 1.14.4, I promised a CVE number, but I have had no=20
>success so far, despite waiting a day and submitting again.  I may=20
>just be doing something wrong, so if any packager with more experience=20
>creating CVEs would like to do so for that release, I would greatly=20
>appreciate it.  (Perhaps also sending an email to mutt-dev, to avoid=20
>multiple submissions).

I've just received the assignment CVE-2020-14954 for the STARTTLS=20
buffering issue.

Thank you everyone,

-Kevin

--WIyZ46R2i8wDzkSu
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=Xrvs
-----END PGP SIGNATURE-----

--WIyZ46R2i8wDzkSu--