mutt 1.14.4 released

Kevin J. McCarthy kevin at
Fri Jun 19 01:14:15 UTC 2020

Hello Mutt Users,

I've just released version 1.14.4.  Instructions for downloading are 
available at <>, or the tarball can be 
directly downloaded from <>.  Please take 
the time to verify the signature file against my public key.

This is an important security release fixing a possible 
machine-in-the-middle response injection attack when using STARTTLS with 
IMAP, POP3, and SMTP.  (For packagers, I've requested a CVE and will 
update the website when I have the number).

Thanks again to Damian Poddebniak and Fabian Ising from the Münster 
University of Applied Sciences for reporting this issue, including 
providing exhaustive tests.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <>

More information about the Mutt-announce mailing list