[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[mpop-users] mpop 1.0.19 is released!
Hi all,
mpop 1.0.19 is released.
This release contains a security fix: When using OpenSSL, NUL characters
in the Common Name or Subject Alternative Name fields of certificates
are now handled properly. This fixes the problem described in
<http://www.blackhat.com/presentations/bh-usa-09/MARLINSPIKE/BHUSA09-Marlinspike-DefeatSSL-PAPER1.pdf>.
Note that mpop is not affected by this problem if GnuTLS is used.
Furthermore, mpop can now handle mail boxes larger than 2 GiB even on
32bit systems (previously, this worked only on 64bit systems).
Regards,
Martin