v0.3.10

[nevans]

Important

0.3.10 is the final release for the 0.3.x release series. Please upgrade to a newer version.

What's Changed

🔒 Security

Warning

#667 fixes a STARTTLS stripping vulnerability. Without this fix, a man-in-the-middle attacker can cause Net::IMAP#starttls to return "successfully", without starting TLS.

Fixes

• 🔒 Fix STARTTLS stripping vulnerability (backports 🔒 Fix STARTTLS stripping vulnerability #664, 🥅 Re-raise #starttls error from receiver thread #395, 🥅 Validate response-tagged in the parser #198) in 🔒 Fix STARTTLS stripping vulnerability (backports #664, #395, #198) #667, reported by @Masamuneee

Full Changelog: v0.3.9...v0.3.10

---

This discussion was created from the release v0.3.10.