• About
• News
• Requirements
• Download
• Comparison
• Documentation
• Contact

mpop 1.2.6 is released!
This release improves error exit codes when multiple accounts are queried.

mpop 1.2.5 is released!
The TLS certificate fingerprinting feature now uses SHA256 fingerprints.

mpop 1.2.4 is released!
This release now uses the system default policy with GnuTLS instead of a hardcoded one.

mpop 1.2.3 is released!
This release fixes a bug in SOCKS proxy support and the handling of non-fatal errors in TLS handshakes.
Note that starting from this version, we do not provide binaries for Windows platforms anymore.

mpop 1.2.2 is released!
This release ignores nonsensical POP3 mail and mailbox sizes (e.g. negative values) instead of reporting an error. Furthermore, a few minor issues related to IDN support were fixed.

mpop 1.2.1 is released!
This release fixes a problem on platforms where glibc does not support Internationalized Domain Names (IDN).

mpop 1.2.0 is released!
This is the new stable release. The 1.0.x series is put to rest after 7.5 years. But do not worry: 1.2.0 is fully compatible with 1.0.x. Noteworthy changes since 1.0.29:

• Support for SOCKS proxies was added. This allows mpop to be used with Tor.
• GNOME Keyring support now uses libsecret instead of libgnome-keyring. Consequently, secret-tool can be used to manage passwords for mpop; the obsolete mpop-gnome-tool script is removed.
• Libidn is not required for IDN support anymore on systems where getaddrinfo() supports the AI_IDN flag and the GnuTLS version is >= 3.4.0.
• SSLv3 is disabled.
• The GSSAPI authentication method is not chosen automatically anymore, you have to request it manually if you want it.
• Configuration file permissions are now only checked if the file actually contains secrets such as passwords. (If you still store passwords in the configuration file, consider using a key ring or the the passwordeval command instead.)
• The documentation was updated and improved.

Enjoy!

mpop 1.2.0rc3 is released!
This is the third release candidate for the next stable version 1.2.0. Changes since 1.2.0rc2:

• Authentication with Microsoft Exchange servers was fixed
• Libsecret support was improved further
• The vim syntax file was updated
• A few minor problems were fixed

Please test!

mpop 1.2.0rc2 is released!
This is the second release candidate for the next stable version 1.2.0. Changes since 1.2.0rc1:

• Gnome Keyring passwords can now be managed with secret-tool (part of libsecret).
• Configuration file security checks are now only performed if the file actually contains passwords (which is not necessary anymore since we have passwordeval and key ring support).

Please test!

mpop 1.2.0rc1 is released!
This is a release candidate for the next stable version 1.2.0. It contains a few more new features and changes than usual, but is still compatible to versions 1.0.x. The most important changes are:

• Support for SOCKS proxies was added. This allows mpop to be used with Tor.
• SSLv3 is disabled
• Gnome Keyring support now uses libsecret
• Libidn is not required for IDN support anymore on new systems

Please test!

mpop 1.0.29 is released!
This release fixes a minor bug in command line parsing.

mpop 1.0.28 is released!
This release fixes building the documentation with texinfo version 5.x.

mpop 1.0.27 is released!
This version fixes a minor problem with a network-related error message.

mpop 1.0.26 is released!
This version fixes a problem with configurations that use OpenSSL and at the same time do not use GNU SASL. (If you use a different configuration, there's no reason to upgrade.)

mpop 1.0.25 is released!
This release fixes a few problems, and marks DIGEST-MD5 authentication as deprecated (see RFC 6331).

mpop 1.0.24 is released!
This is a cleanup release that updates the build system and removes old cruft and unnecessary complexity, without changing the functionality of the program.

mpop 1.0.23 is released!
This release fixes SCRAM-SHA-1 authentication via GNU SASL.
If you use a version of mpop that supports SCRAM-SHA-1 authentication via libgsasl (see the output of mpop --version), then an update is recommended.

mpop 1.0.22 is released!
This release adds a passwordeval command that allows to set the password to the output of a program invocation.

mpop 1.0.21 is released!
This minor update mainly fixes build problems with newer OpenSSL versions and with disabled TLS/SSL support.

mpop 1.0.20 is released!
This release adds support for authentication mechanism SCRAM-SHA-1 via GNU SASL. The new command tls_fingerprint allows one to trust one particular TLS certificate, in case tls_trust_file cannot be used for some reason. The new script mpop-gnome-tool.py manages Gnome Keyring passwords for mpop.

mpop 1.0.19 is released!
This release contains a security fix: When using OpenSSL, NUL characters in the Common Name or Subject Alternative Name fields of certificates are now handled properly. This fixes the problem described here. Note that mpop is not affected by this problem if GnuTLS is used.
Furthermore, mpop can now handle mail boxes larger than 2 GiB even on 32bit systems (previously, this worked only on 64bit systems).

mpop 1.0.18 is released!
This release adds support for delivery to Exchange pickup directories and fixes some minor problems.

mpop 1.0.17 is released!
This release fixes some minor glitches.
The source code repository moved from CVS to Git.

mpop 1.0.16 is released!
This release adds support for storing passwords in the GNOME keyring.
Update: The binary for Windows contained a bug and was replaced by version 1.0.16+20081227.

mpop 1.0.15 is released!
This release fixes two bad bugs:

• With certain POP3 servers, mpop would in rare cases fail to read an UIDLS file correctly.
• Mpop failed to correctly retrieve mails that have no mail body (the much more common case of mails with empty mail bodies was handled correctly, that's why this longstanding bug was not found earlier).

Everyone is encouraged to upgrade!

mpop 1.0.14 is released!
The following changes are noteworthy in this release:

• Performance is further improved by a new approach to handle UIDs. This is especially noticable with large mail boxes (many thousands of mails).
• TLS/SSL configurability is improved by the new commands tls_crl_file, tls_priorities, and tls_min_dh_prime_bits.

mpop 1.0.13 is released!
Support to store passwords using the Mac OS X keychain was added by Jay Soffian. Performance problems when using GnuTLS were fixed.

mpop 1.0.12 is released!
This release fixes some minor bugs.

The LinuxUser Magazine (in german) has an article about mpop in issue 10/2007, to be released on September 20, 2007. The article was written by Andreas Kneib.
The magazine already ran an article by the same author on msmtp in issue 04/2005. Msmtp shares much of its source code with mpop.

mpop 1.0.11 is released!
Bug fixes and improvements for large POP3 mail boxes with thousands of mails were made, thanks to Dimitrios Apostolou.
The license was updated to GPLv3 or later (source code) and GFDLv1.2 or later (documentation).

mpop 1.0.10 is released!
A bug in the UID handling code was fixed. The bug was introduced in version 1.0.7.
As a consequence, if you update from version 1.0.7-1.0.9, the first invocation of this new mpop version will download all mails from the server, even mails that were retrieved before. Sorry for the inconvenience.

mpop 1.0.9 is released! This is a security update.

• Security fix: APOP authentication is vulnerable to man-in-the-middle attacks. See CVE-2007-1558. Such attacks might lead to password disclosure. Therefore, mpop does not use APOP automatically without TLS anymore. Additionally, the checks on the APOP challenge were too lax in previous versions of mpop, making attacks easier than necessary. This has been fixed.
• Security improvement: NTLM authentication is not used automatically without TLS anymore.
• Security improvement: TLS now requires either tls_trust_file (highly recommended) or a disabled tls_certcheck.

An update is recommended.

mpop 1.0.8 is released!
This version has improved capability detection for servers that are not 100% standards compliant. For example, POP3 pipelining is now automatically used for pop.gmail.com and some other servers.

mpop 1.0.7 is released!
This version now works with the Comcast.net POP3 server, thanks to a patch by Benji Fisher.

mpop 1.0.6 is released!
Some build and installation problems were fixed.
The default value for the pipelining setting is now auto. The values on and off now have a slightly different meaning: they force pipelining on or off regardless of server capabilities. If you use pipelining on and your POP3 sessions hang, switch to pipelining auto.

mpop 1.0.5 is released!
This release fixes yet another build problem.

mpop 1.0.4 is released!
Some minor build problems were fixed, and the gnulib portability library was updated.
Using OpenSSL on Mac OS X works again.

mpop 1.0.3 is released!
Support for GNU SASL was fixed (it was broken in 1.0.2).
A spanish translation was added by Carlos Martín Nieto. Thanks a lot!

mpop 1.0.2 is released!
Minor bugs were fixed, and some portability issues were solved.
The configuration command tls_force_sslv3 was added. This is needed to use TLS/SSL with some old and broken servers.

mpop 1.0.1 is released!
Minor bugs were fixed, and some portability issues were solved.
The default UIDLS file changed from ~/.mpop_uidls to ~/.mpop_uidls/%U_at_%H. %U and %H will be replaced with the user and host name of an account. This means that every account uses its own UIDLS file now.
!!! IMPORTANT !!!
If you update from mpop-1.0.0, you must do one of the following:

• If your ~/.mpop_uidls file contains no UIDs, delete it.
• If you want to keep using it, add the following line to the "defaults" section of your configuration file:
  uidls_file ~/.mpop_uidls

mpop 1.0.0 is released!
Finally :)
Thanks to everybody who helped with this.
This release adds the --all-accounts (-a) option to query all accounts in the configuration file.
Some bugs were fixed, so everybody is invited to upgrade to this version.
Important update:
Please note that the original mpop-1.0.0.tar.bz2 archive accidentally missed the file gnulib/nanosleep.h. This caused compilation errors.
Since the original file was only online for a few minutes, I simply replaced it with a fixed version. If you have the defective archive, please download the new version of the file.
Thanks to Marco Ferra for reporting this issue so fast.

mpop 0.8.5 is released!
Again, one more beta release before 1.0.0.
This time, my excuse is the large number of small changes, and the addition of optional support for Internationalized Domain Names (IDN) via GNU Libidn.
Please test this release!

mpop 0.8.4 is released!
One more beta release before 1.0.0, because a bug fix and a feature addition introduced some new code. Please test this release!
Binaries for Windows are available again.

mpop 0.8.3 is released!
Only a few minor tweaks were made in preparation of the upcoming 1.0.0 release.
The development moved to a public CVS repository on SourceForge, and the mailing list mpop-users was created. Everyone is invited to participate!