Dear Alpiners,

it is my pleasure to announce the new release of Alpine, version 2.25.
This new version has new features and bug fixes. The complete list of
changes can be found in the release notes, which you can access from the
main screen of Alpine, by pressing "R".

These are direct links to the relevant files:

Source code
http://alpine.x10host.com/alpine/release/src/alpine-2.25.tar.xz
MD5: 50e59c7979f43fcc7a45e43760e2a97d
SHA256: 658a150982f6740bb4128e6dd81188eaa1212ca0bf689b83c2093bb518ecf776

64-bits version of Alpine
http://alpine.x10host.com/alpine/release/src/alpine-2.25.zip
MD5: 0aa2f784549fb4e144182a38e95033a1)
SHA256: b97cddad140a00e91d17a33d4029731033586718660d4acbaa8c3dc8cb54e581)

32-bits version of Alpine
http://alpine.x10host.com/alpine/release/src/alpine-2.25_32bits.zip
MD5: 351f72709ac3ee12f17e489955da8e39
SHA256: 28a9740a7fdcfe11301d5950404d229d2a8cda605d114dc1ba807cf2d36b0f79

It is worth noticing that this version fixes a new vulnerability of
Alpine in the imap code. Versions previous to this version accept untagged
replies from an imap server and process them as if Alpine were in
authenticated state. An attacker could use this to make Alpine crash,
leading to a denial of service. I am not aware that this could be
exploited in any other way. This vulnerability exists in all version of
alpine up to 2.24 (or any program built with the c-client library.)

See more details at
https://nvd.nist.gov/vuln/detail/CVE-2021-38370
and
https://nostarttls.secvuln.info/

Enjoy the new release of Alpine.

--
Eduardo

Eduardo Chappa <alpine.chappa@yandex.com> wrote:

> it is my pleasure to announce the new release of Alpine, version 2.25.
>. . .

Thank you for your hard work maintaining the code.

On 2021-09-20, Eduardo Chappa <alpine.chappa@yandex.com> wrote:
>Dear Alpiners,

> it is my pleasure to announce the new release of Alpine, version 2.25.
>This new version has new features and bug fixes. The complete list of
>changes can be found in the release notes, which you can access from the
>main screen of Alpine, by pressing "R".

> These are direct links to the relevant files:

>Source code
> http://alpine.x10host.com/alpine/release/src/alpine-2.25.tar.xz
>MD5: 50e59c7979f43fcc7a45e43760e2a97d
>SHA256: 658a150982f6740bb4128e6dd81188eaa1212ca0bf689b83c2093bb518ecf776

It is always 8 or 16 or 32 or 64 BIT!

All is forgiven!

Eduardo Chappa <alpine.chappa@yandex.com> wrote:
> Dear Alpiners,
>
> it is my pleasure to announce the new release of Alpine, version 2.25.
> This new version has new features and bug fixes. The complete list of
> changes can be found in the release notes, which you can access from the
> main screen of Alpine, by pressing "R".

Thank you very much. It's a great program.

Well Edwardo, no matter whether I use wget or LYNX, it just hangs. Maybe I will
have to wait until Debian SID has it? Thanks in advance
Chime

In article <43773599-5c67-f896-714b-9b8aa9dc389b@hubert-humphrey.com>,
Chime Hart <chime@hubert-humphrey.com> wrote:
>Well Edwardo, no matter whether I use wget or LYNX, it just
>hangs. Maybe I will have to wait until Debian SID has it? Thanks in
>advance

The Fossies source archive has copies of the latest release
of alpine; that's alpine-2.25.tar.xz, alpine-2.25.zip and
alpine-2.25_32bits.zip. See:

https://fossies.org/all.html

and in particular:

https://fossies.org/linux/misc/alpine-2.25.tar.xz/

https://fossies.org/windows/mail/alpine-2.25.zip/

https://fossies.org/windows/mail/alpine-2.25_32bits.zip/
--
Dennis Davis <dennisdavis@fastmail.fm>

In article <simhut$38l$1@gioia.aioe.org>,
Dennis Davis <dennisdavis@fastmail.fm> wrote:

....

>and in particular:
>
>https://fossies.org/linux/misc/alpine-2.25.tar.xz/
>
>https://fossies.org/windows/mail/alpine-2.25.zip/
>
>https://fossies.org/windows/mail/alpine-2.25_32bits.zip/

Forgot to add that you can download any of the above by just
omitting the trailing "/" when using wget. So:

wget https://fossies.org/linux/misc/alpine-2.25.tar.xz

wget https://fossies.org/windows/mail/alpine-2.25.zip

wget https://fossies.org/windows/mail/alpine-2.25_32bits.zip

should do what you want.
--
Dennis Davis <dennisdavis@fastmail.fm>

On Fri, 24 Sep 2021, Chime Hart wrote:

> Well Edwardo, no matter whether I use wget or LYNX, it just hangs. Maybe I
> will have to wait until Debian SID has it? Thanks in advance
> Chime

I am waiting for my site to go back up. I do not know what happened. All
the provider said was that they were having trouble with all their
servers. I hope the site will be back up soon.

I am glad there are alternatives, such as fossies, to download Alpine.
Thank you Dennis for providing those links!

--
Eduardo
https://tinyurl.com/yc377wlh (web)
http://repo.or.cz/alpine.git (Git)

Eduardo Chappa <chappa@washington.edu> wrote:
>On Fri, 24 Sep 2021, Chime Hart wrote:

>>Well Edwardo, no matter whether I use wget or LYNX, it just hangs. Maybe I
>>will have to wait until Debian SID has it? Thanks in advance
>>Chime

>I am waiting for my site to go back up. I do not know what happened. All
>the provider said was that they were having trouble with all their
>servers. I hope the site will be back up soon.

>I am glad there are alternatives, such as fossies, to download Alpine.
>Thank you Dennis for providing those links!

>--
>Eduardo
>https://tinyurl.com/yc377wlh (web)
>http://repo.or.cz/alpine.git (Git)

I wish you wouldn't use tinyurl in your .sig. The URL to your actual
site, when it's not off line, isn't a long URL.

Good evening Eduardo: Well ./configure bombed out with this following ssl error
checking Openssl library version >= 1.0.0c... configure: error: Install openssl version >= 1.0.0c4
Back again live. So I have a later version than what it wants. Thanks in
advance
Chime

On Sun, 26 Sep 2021, Chime Hart wrote:

> Good evening Eduardo: Well ./configure bombed out with this following ssl
> error
> checking Openssl library version >= 1.0.0c... configure: error: Install
> openssl version >= 1.0.0c4
> Back again live. So I have a later version than what it wants. Thanks in
> advance

Dear Chime,

this means that you need to install the header files for openssl. How
you do that depends on your Linux distribution. I think the message is not
clear, and it needs to be clarified.

Thank you.

--
Eduardo
https://tinyurl.com/yc377wlh (web)
http://repo.or.cz/alpine.git (Git)

In article <70a86adc-3894-d750-43b3-1ccc966120bc@washington.edu>,
Eduardo Chappa <chappa@washington.edu> wrote:

....

>I am glad there are alternatives, such as fossies, to download Alpine.
>Thank you Dennis for providing those links!

No need to thank me. An Internet search engine:

https://www.duckduckgo.com

did the inital heavy lifting and provided a link to the Fossies site:

https://fossies.org/all.html

After that it was just the small matter of filling in the details.
--
Dennis Davis <dennisdavis@fastmail.fm>

On Wed, 29 Sep 2021, Dennis Davis wrote:

>> I am glad there are alternatives, such as fossies, to download Alpine.
>> Thank you Dennis for providing those links!
>
> No need to thank me. An Internet search engine:
>
> https://www.duckduckgo.com
>
> did the inital heavy lifting and provided a link to the Fossies site:
>
> https://fossies.org/all.html
>
> After that it was just the small matter of filling in the details.

Thank you for going to all the effort of doing that. I was panicking my
site is off (and is still off) and your ability to find a solution for the
poster is to be commended. I apreciate all the efforts you make for the
Alpine project, they are very helpful. Thank you, Dennis!

--
Eduardo
https://tinyurl.com/yc377wlh (web)
http://repo.or.cz/alpine.git (Git)