[mew-int 01228] Mew 2.2 security problems?

[sen_ml at example.com]

Hi,

I noticed in the announcement for Mew 3.1, the following text:

  If you cannot upgrade to Mew 3.1, you should upgrade to Mew 2.3
  since Mew 2.2 has security problems.

I haven't managed to find what these security problems are...any
pointers?

One reason I'm asking is that I don't see an updated package for Mew
(neither 2.3 nor 3.1 [1]) avaiable for the stable version of Debian
GNU/Linux so I'm reduced to running from source.

Another reason is curiosity (-;

Thanks for your attention.


[1] Though there appears to be a 3.1 package for unstable -- perhaps
    this works under stable.