Skip to content

Sealwax 1.0.4

Choose a tag to compare

View all tags
@PixDevsApps PixDevsApps released this 25 Oct 13:25
· 38 commits to main since this release
v1.0.4
749bb21

A security update. Please update.

  • A mail server can't make Sealwax quit any more: when Sealwax fetches new mail, the server describes how each message's parts are nested inside one another. A description nested a few hundred levels deep, under a kilobyte, made Sealwax run out of room and quit at once, and again at each start while the server kept sending it. Anyone on the network could also send one in place of the server's first line on port 143, before the connection is encrypted. Sealwax now stops at 20 levels: such a message shows without its attachment clip. The fix is imap-proto's own, the library Sealwax reads IMAP with, applied to Sealwax's copy until an imap-proto release has it (GHSA-wv8g-4592-g5r2).

Install, update or uninstall: see INSTALL.md, in plain words.

Assets 7
Loading