Prepare 0.7.1 release

lettre/CHANGELOG.md

@@ -1,3 +1,11 @@
+### v0.7.1 (2020-11-11)
+
+#### Bug fixes
+
+* **transport**
+
+  * **SECURITY**: Prevent argument injection in sendmail transport
+
 ### v0.7.0 (2017-10-08)
 
 #### Features

lettre/Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 
 name = "lettre"
-version = "0.7.0"
+version = "0.7.1"
 description = "Email client"
 readme = "README.md"
 documentation = "https://docs.rs/lettre/"

lettre/src/sendmail/mod.rs

@@ -52,6 +52,7 @@ impl<'a, T: Read + 'a> EmailTransport<'a, T, SendmailResult> for SendmailTranspo
                     "-i",
                     "-f",
                     &email.from().to_string(),
+                    "--",
                     &to_addresses.join(" "),
                 ],
             )