Subject: Pine 4.44 now available

This note is to announce the availability of the Pine Message System
version 4.44. The purpose of this release is to fix a security
bug with the treatment of quotes in the URL-handling code. The bug
allows a malicious sender to embed commands in a URL. This bug is
present in all versions of UNIX Pine. There is no vulnerability from
this bug in PC-Pine.

The release notes are available from within Pine ("R" command off the
Main Menu) and via

         http://www.washington.edu/pine/changes.html
and
         ftp://ftp.cac.washington.edu/pine/docs/

Source for the latest Pine release is available in:

         ftp://ftp.cac.washington.edu/pine/pine.tar.Z
and
         ftp://ftp.cac.washington.edu/pine/pine.tar.gz

Precompiled binaries for the various systems we have direct access to
are available in:

         ftp://ftp.cac.washington.edu/pine/unix-bin
and
         ftp://ftp.cac.washington.edu/pine/unix-bin-compressed

The corresponding PC-Pine distribution is available in:

         ftp://ftp.cac.washington.edu/pine/pcpine/pm444w32.zip

As with all Pine releases, it is important that you carefully test and
determine for yourself that it performs suitably in your environment
before placing Pine into production use.

The Pine Development Team


VICUG-L is the Visually Impaired Computer User Group List.
To join or leave the list, send a message to
[log in to unmask]  In the body of the message, simply type
"subscribe vicug-l" or "unsubscribe vicug-l" without the quotations.
 VICUG-L is archived on the World Wide Web at
http://maelstrom.stjohns.edu/archives/vicug-l.html