[MlMt] Is MailMate susceptible to this vulnerability? CVE-2020-11879 CVE-2020-11880 CVE-2020-4089

[Benny Kjær Nielsen]

On 20 Aug 2020, at 20:38, Benny Kjær Nielsen wrote:

> On 20 Aug 2020, at 19:34, Charlie Clark wrote:
>
>> On 20 Aug 2020, at 19:25, Sharjeel Sayed wrote:
>>
>>> <https://www.zdnet.com/article/some-email-clients-are-vulnerable-to-attacks-via-mailto-links>
>
> [...]
>
> These were just my quick thoughts on the subject. This is unlikely to be the last time someone finds potential security issues in MailMate, but I'll continue to do what I can  to fix them.

This happened sooner that I would have liked. Please note that the latest updates of MailMate (both public and test releases) include an important fix for S/MIME usage. There's more about this embarrassment in [this blog post](https://blog.freron.com/2020/mailmate-1-13-2-released/).

I really need a weekend now...

-- 
Benny
https://freron.com/become_a_mailmate_patron/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freron.com/pipermail/mailmate/attachments/20200828/af34b4c6/attachment.htm>