This was a duplicate message apparently inserted at trymedia.com. It's certainly not the version of the message I sent out.
On 2002-01-11 01:54:49 -0800, Thomas Roessler wrote: >Return-Path: <[EMAIL PROTECTED]> >Delivered-To: [EMAIL PROTECTED] >Received: from localhost (localhost [127.0.0.1]) > by sobolev.does-not-exist.org (Postfix) with ESMTP id 54EAD2ED13 > for <[EMAIL PROTECTED]>; Fri, 11 Jan 2002 11:00:54 +0100 >(CET) >Delivered-To: [EMAIL PROTECTED] >Received: from pop.does-not-exist.org > by localhost with POP3 (fetchmail-5.3.3) > for [EMAIL PROTECTED] (single-drop); Fri, 11 Jan 2002 >11:00:54 +0100 (CET) >Received: by mail.mediacompany.com (Postfix, from userid 500) > id BC5E5480A; Fri, 11 Jan 2002 10:56:22 +0100 (CET) >Delivered-To: [EMAIL PROTECTED] >Received: from ns.gbnet.net (ns.gbnet.net [194.70.126.10]) > by mail.mediacompany.com (Postfix) with SMTP id EDAD14807 > for <[EMAIL PROTECTED]>; Fri, 11 Jan 2002 10:56:21 +0100 (CET) >Received: (qmail 29293 invoked by uid 610); 11 Jan 2002 09:55:14 -0000 >Delivered-To: [EMAIL PROTECTED] >Received: (qmail 29140 invoked from network); 11 Jan 2002 09:54:53 -0000 >Received: from server.trymedia.com (HELO postal.trymedia.com) (209.24.233.55) > by ns.gbnet.net with SMTP; 11 Jan 2002 09:54:53 -0000 >Received: by postal.trymedia.com (Postfix, from userid 0) > id A9F355E2D; Fri, 11 Jan 2002 01:54:49 -0800 (PST) >From: Thomas Roessler <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED] >Subject: [Announce] SECURITY: mutt-1.2.5.1 and mutt-1.3.25 released. >Message-Id: <[EMAIL PROTECTED]> >Date: Fri, 11 Jan 2002 01:54:49 -0800 (PST) >Sender: [EMAIL PROTECTED] >Precedence: bulk > >--zhXaljGHf11kAtnf >Content-Type: text/plain; charset=us-ascii; format=flowed >Content-Disposition: inline >Content-Transfer-Encoding: quoted-printable > >mutt-1.2.5.1 and mutt-1.3.25 have just been released. > >These releases both fix a security hole which can be remotely >exploited. The problem was found and a fix suggested by Joost Pol ><[EMAIL PROTECTED]>. Thanks for that. > >mutt-1.2.5.1 is released as an update to the last stable version of >mutt, mutt-1.2.5. The ONLY relevant change in this version is the >fix mentioned above. No other bugs present in 1.2.5 have been >fixed. You only want to upgrade to this version of mutt if you >absolutely have to stick with the mutt-1.2 series. > >mutt-1.3.25 is the latest BETA version of mutt, and very close to >what will eventually become mutt-1.4. Personally, I'd recommend >that you download and use this version. > >The tar balls, with detached PGP signatures, will be available from=20 ><ftp://ftp.mutt.org/pub/mutt/> in some minutes. > >As an alternative, you can apply the patch available from=20 ><ftp://ftp.mutt.org/pub/mutt/patch-1.2,3.rfc822_terminate.1> to any=20 >1.2 or 1.3 series mutt source code, and rebuild. > > >I apologize for the problem, and wish all of you a happy new year. > >--=20 >Thomas Roessler http://log.does-not-exist.org/ > >--zhXaljGHf11kAtnf >Content-Type: application/pgp-signature >Content-Disposition: inline > >-----BEGIN PGP SIGNATURE----- >Version: GnuPG v1.0.6 (GNU/Linux) > >iQEVAwUBPDIev9ImKUTOasbBAQJqSAf6AvWpzKDJumBz4rPhIoVENsSyOu4/N78b >k4em4afI6jJ0hjZmcBlQSvf0THqax+eNTRTWKnJMJ9o7Fz80usL697TEksDb8aCV >9h89JAAlRQHZIP6fjx0jr7KMmjz5i4XqG13mLm+9S52MK76wFwf5HHd+3VAzcfni >JP4EcUIGd/nNCh+MrhGTuFlRC0mZ/zOYPeyZ/iC1abXOGAWuPgDcucEd+O/n6TXp >Aw6s5xwZg26buqmQEuy5J3E3VksLqQwl3iEDFf6XijnOKjHIuPh4Lvxddg50NeTm >a0EOVmoS8ZfnIme+vnCQXKIR1vvKKsLraXEn6Jw6XwG97RSNurx5qQ== >=clc3 >-----END PGP SIGNATURE----- > >--zhXaljGHf11kAtnf-- -- Thomas Roessler http://log.does-not-exist.org/