From 50397df21149ba92ccf16c3a6aa3f6199ddc54dc Mon Sep 17 00:00:00 2001
From: Michael J Gruber <mjg@fedoraproject.org>
Date: Sep 10 2021 13:00:07 +0000
Subject: fix potential information leak (bz #2003106)


When there is no configured sending address notmuch tries to construct
one from host domain etc. This might leak informtion unintentionally.
notmuch 0.33.1 uses "localhost" instead.

---

diff --git a/.gitignore b/.gitignore
index 9b6ae0b..6cb089b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -70,3 +70,5 @@
 /notmuch-0.33~rc0.tar.xz.asc
 /notmuch-0.33.tar.xz
 /notmuch-0.33.tar.xz.asc
+/notmuch-0.33.1.tar.xz
+/notmuch-0.33.1.tar.xz.asc
diff --git a/notmuch.spec b/notmuch.spec
index 3481ec4..5d80655 100644
--- a/notmuch.spec
+++ b/notmuch.spec
@@ -19,7 +19,7 @@
 %endif
 
 Name:           notmuch
-Version:        0.33
+Version:        0.33.1
 Release:        %autorelease
 Summary:        System for indexing, searching, and tagging email
 License:        GPLv3+
diff --git a/sources b/sources
index 167acb7..518ef3f 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (notmuch-0.33.tar.xz) = 280dab51b80f701d0b392da08a5026f7efef198640e23084ccaf5a8e138c3eee413d2243e1a98e856391432cb6afe50ee817797be8768a2f2564797b3aefe14d
-SHA512 (notmuch-0.33.tar.xz.asc) = 79097d5891e0ac22fe841cc21f10713b8f66b1716da4108f0076f59e6777b68dabc6268ffb2be184662dc9622ee64b2904e2e2cc8863f5384dc87599dae79e27
+SHA512 (notmuch-0.33.1.tar.xz) = 19c4ab0a05ebc7230631f554864cfa65fe37e9b3c1a20ed21cc090cda612b28042ea90e64cfe86a1d6157cd0510357da8c066b9146c045e61cb3e7836012a695
+SHA512 (notmuch-0.33.1.tar.xz.asc) = 1c39bad6a911f1084dbc3329007c416c64a2b0ff29bbb12dc7cfbbc7fc9a132c34a5acdce0d990fa4e6b8a5e4106706d8c27d77b2653874ddd51986ac2b42a2b