mutt 1.14.4 released

[Kevin J. McCarthy]

Hello Mutt Users,

I've just released version 1.14.4.  Instructions for downloading are 
available at <http://www.mutt.org/download.html>, or the tarball can be 
directly downloaded from <http://ftp.mutt.org/pub/mutt/>.  Please take 
the time to verify the signature file against my public key.

This is an important security release fixing a possible 
machine-in-the-middle response injection attack when using STARTTLS with 
IMAP, POP3, and SMTP.  (For packagers, I've requested a CVE and will 
update the website when I have the number).

Thanks again to Damian Poddebniak and Fabian Ising from the Münster 
University of Applied Sciences for reporting this issue, including 
providing exhaustive tests.

-Kevin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.mutt.org/pipermail/mutt-users/attachments/20200618/1ce72177/attachment.asc>