[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[mpop-users] mpop 1.0.19 is released!



Hi all,

mpop 1.0.19 is released.

This release contains a security fix: When using OpenSSL, NUL characters
in the Common Name or Subject Alternative Name fields of certificates
are now handled properly. This fixes the problem described in
<http://www.blackhat.com/presentations/bh-usa-09/MARLINSPIKE/BHUSA09-Marlinspike-DefeatSSL-PAPER1.pdf>.

Note that mpop is not affected by this problem if GnuTLS is used.

Furthermore, mpop can now handle mail boxes larger than 2 GiB even on
32bit systems (previously, this worked only on 64bit systems).

Regards,
Martin